The flaw in the OpenShift console allows an unauthenticated attacker to manipulate the lng and ns parameters in the /locales/resource.json endpoint, enabling a path traversal that reads arbitrary *.json files from the pod filesystem. The attacker can retrieve sensitive configuration files, plugin manifests, and potentially any other JSON file that resides under the pod’s file system. This constitutes a confidential data exposure that could compromise the integrity of application configuration and reveal deployment details. The weakness is a classic directory traversal (CWE‑22).

The vulnerability affects Red Hat OpenShift Container Platform 4, specifically the console component that serves i18n resources. Vendor documentation lists this flaw for the Red Hat OpenShift Container Platform 4 family, but no specific minor or patch level is given, so all current releases of OpenShift 4 are considered potentially vulnerable until a patch is released.

The CVSS score of 7.5 indicates high severity, while the EPSS score is not available, and the flaw is not yet listed in CISA KEV. Because the attack surface is a publicly exposed web endpoint and no authentication is required, the risk of exploitation is significant for any exposed console, especially in environments with open internet access. The vulnerability could be leveraged by an attacker solely with network connectivity to the console, without needing privileged credentials.