Skip to content
OpenAdvisories
Unscored CVE-2015-8945 EUVD-2015-8801

openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials opti…

Published Aug 5, 2016 · Updated Aug 6, 2024 · Assigned by mitre

Description

openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information by reading the systemd journal.

References