Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3q58-8ch7-h333

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A flaw was found in noobaa-operator in versions before 5.7.0, where internal RPC AuthTokens between the noobaa operator and the noobaa core are leaked into log files. An attacker with access to the log files could use this AuthToken to gain additional access into noobaa deployment and can read/modify system configuration.

A flaw was found in noobaa-operator in versions before 5.7.0, where internal RPC AuthTokens between the noobaa operator and the noobaa core are leaked into log files. An attacker with access to the log files could use this AuthToken to gain additional access into noobaa deployment and can read/modify system configuration.

EPSS

Процентиль: 55%
0.0033
Низкий

8.8 High

CVSS3

Дефекты

CWE-532

Связанные уязвимости

CVSS3: 8.8
redhat
почти 5 лет назад

A flaw was found in noobaa-operator in versions before 5.7.0, where internal RPC AuthTokens between the noobaa operator and the noobaa core are leaked into log files. An attacker with access to the log files could use this AuthToken to gain additional access into noobaa deployment and can read/modify system configuration.

CVSS3: 8.8
nvd
больше 4 лет назад

A flaw was found in noobaa-operator in versions before 5.7.0, where internal RPC AuthTokens between the noobaa operator and the noobaa core are leaked into log files. An attacker with access to the log files could use this AuthToken to gain additional access into noobaa deployment and can read/modify system configuration.

EPSS

Процентиль: 55%
0.0033
Низкий

8.8 High

CVSS3

Дефекты

CWE-532