Description
A vulnerability was found in the OAuth-server. OAuth-server logs the OAuth2 client secret when the logLevel is Debug higher for OIDC/GitHub/GitLab/Google IDPs login options.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | oauth-server-container | 4.12.*, 4.13.*, 4.14.*, 4.15.*, 4.16.*, 4.17.*, 4.18.* | — |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — |
References
- https://access.redhat.com/security/cve/CVE-2024-11217 vdb-entry
- RHBZ#2326230 issue-tracking