Description (CNA)
A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a repository pull secret.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | affected 0 through 0.1.1 |
| Red Hat / Red Hat OpenShift Container Platform 4.12 | unaffected v4.12.0-202405091536.p0.g8906207.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.13 | unaffected v4.13.0-202404200313.p0.gb518881.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gf350a68.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gcafed17.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gafffdd4.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g48fafc4.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.ge79d817.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.ga0733c1.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g1a5e72f.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g2dbe78f.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g46dedc6.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gd8cf3c9.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g46dedc6.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gad85376.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g8ba0b37.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404170009.p0.g3dc363d.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g8853e6e.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g27f105d.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g3362d67.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g607e2dd.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g54a95bd.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g2e2e277.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g95bcf9a.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gad7aa0a.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gf0e7cbb.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gf0e7cbb.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g7ad2773.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gb19eec1.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g9189357.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g354c55d.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gf401f53.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g43a15be.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g78da43a.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gfb20cda.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g937b5fd.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g13046b3.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gf7b14a9.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gf7b14a9.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.ga687275.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gae83c55.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g9203d4d.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g9d87281.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g5d436c6.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g270579c.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g93fba13.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gb4c4fb1.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gb4c4fb1.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g33a706e.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g91fa980.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g074a22c.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404170009.p0.gd4a1162.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g5553a22.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g74f5363.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gd139e6b.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gd876f5a.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404171239.p0.g2eab0f9.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gb287d08.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g4e05963.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g33f630d.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g9cd9922.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g711b4f6.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404170009.p0.g1839fb4.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gd429c8b.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404171239.p0.g88d3f42.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404171239.p0.g88d3f42.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g0dbbb61.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g8bd8602.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g3985c55.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g08fb27e.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g219f6f6.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g61a3465.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gaab7b5b.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gaf210dc.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g716a0c3.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gf6b13c7.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g855f3fc.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g7295a5e.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g7d3fa77.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g697083a.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gd93a218.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.ge1dd453.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.gc273cd5.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g9232c1f.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g9232c1f.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g06e8ce0.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g06e8ce0.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g78a710f.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g78a710f.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g59a701a.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g59a701a.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.ga683453.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.ga683453.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.ga9bcbde.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.ga9bcbde.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g9dcaa7f.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.g9dcaa7f.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.ga683453.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.ga683453.assembly.stream.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected v4.14.0-202404161544.p0.ga683453.assembly.stream.el8 before * |
CWE
CWE-200
References
- https://access.redhat.com/errata/RHSA-2024:1887
- https://access.redhat.com/errata/RHSA-2024:1891
- https://access.redhat.com/errata/RHSA-2024:2047
- https://access.redhat.com/errata/RHSA-2024:2782
- https://access.redhat.com/security/cve/CVE-2024-1139
- https://bugzilla.redhat.com/show_bug.cgi?id=2262158
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.