openshift4/ose-cloud-credential-operator vulnerabilities

CVEs whose affected-version data names the openshift4/ose-cloud-credential-operator package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-1139High· 7.7

2y ago

A credentials leak vulnerability was found in the cluster monitoring operator in OCP

A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a repository pull secret.

▾ TwilightRed Hat · cluster-monitoring-operatorEPSS 0.89%via NVD