Red Hat Security Advisory

RHSA-2021:2479

Red Hat OpenShift Container Storage 4.6.5 security and bug fix update

Released 2021-06-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Storage 4.6 on RHEL-8 ocs4/mcg-rhel8-operator

Fixes 1 record

TI-2021-02485 CVE-2021-3528 · GHSA-3q58-8ch7-h333

Insufficiently protected credentials in NooBaa

MEDIUM 40

A flaw was found in noobaa-operator in versions before 5.7.0, where internal RPC AuthTokens between the noobaa operator and the noobaa core are leaked into log files.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00887 Published 2021-05-13 Fixed CWE-522