The OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker with sufficient privileges to view confidential webhook tokens.
Advisories
Source ID Title
EUVD EUVD EUVD-2017-6598 The OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker with sufficient privileges to view confidential webhook tokens.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-05T19:50:16.307Z

Reserved: 2017-10-08T00:00:00

Link: CVE-2017-15138

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-08-13T17:29:00.233

Modified: 2024-11-21T03:14:08.847

Link: CVE-2017-15138

cve-icon Redhat

Severity : Moderate

Publid Date: 2018-04-11T00:00:00Z

Links: CVE-2017-15138 - Bugzilla

cve-icon OpenCVE Enrichment

No data.