TI-2020-08649 Aliases CVE-2020-10752 GHSA-3cmv-p7jw-h3fg

Insufficiently protected credentials in openshift/openshift-apiserver

LOW 35CWE-522Published 2020-06-12 · Updated 2024-08-04

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: High
Impact type: Information disclosure
Confidentiality · integrity · availability: High · High · High
Fix status: Will not fix Red Hat: no fix planned

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-522.

Summary

A flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens by leaking them into the logs when an API Server panic occurred. This flaw allows an attacker with the ability to cause an API Server error to read the logs, and use the leaked OAuthToken to log into the API Server with the leaked token.

Why it matters now

EPSS 0.01072 65th percentileScored 2026-11-07

Fix Will not fix Red Hat: no fix planned

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
OpenShift	openshift/openshift-apiserver	All versions	—	No fix listed	CNA

openshift/openshift-apiserver VendorOpenShift Affected All versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:redhat:openshift_container_platform:3.11:::::::*	3.11	Vulnerable	Red Hat
cpe:2.3:a:redhat:openshift_container_platform:4.0:::::::*	4.0	Vulnerable	Red Hat

cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:* Versions 3.11 Vulnerable ·Red Hat
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat OpenShift Container Platform 3.11	Affected	No fix planned: Will not fix
Red Hat OpenShift Container Platform 4	Affected	No fix planned: Will not fix

Timeline

2026-10-02 Threatist record created from CVE-2020-10752
2026-10-03 Alias added: GHSA-3cmv-p7jw-h3fg

References

Patch 1

https://github.com/openshift/enhancements/pull/323

Advisory 1

https://github.com/openshift/origin/blob/master/vendor/k8s.io/kubernetes/staging/src/k8s.io/apiserver/pkg/server/filters/wrap.go#L39

TI-2014-00157 Openshift has shell command injection flaws due to unsanitized data being passed into shell commands. CVSS 3.1HIGH 8.8
TI-2014-00023 OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution CVSS 3.1HIGH 7.8
TI-2013-00130 Cross-site request forgery in OpenShift Enterprise CVSS 3.1MEDIUM 6.5
TI-2021-03152 OpenShift OSIN CheckClientSecret timing discrepancy CVSS 3.1MEDIUM 5.9
TI-2015-02837 In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes. CVSS 3.1MEDIUM 5.3
TI-2015-07358 openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials… CVSS 3.0MEDIUM 5.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences