Lucene search
+L

7 matches found

NVD
NVD
•added 2026/08/11 8:18 p.m.•14 views

CVE-2026-71845

A flaw was found in insights-client. The setDefault function logs the value of every environment variable it processes, including CCXTOKEN, a bearer credential used in disconnected cluster deployments. When glog verbosity is set to level 2 or higher, the token is written in clear text to the pod...

7.7CVSS0.00501EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/08/11 7:22 p.m.•17 views

EUVD-2026-56898

A flaw was found in insights-client. The setDefault function logs the value of every environment variable it processes, including CCXTOKEN, a bearer credential used in disconnected cluster deployments. When glog verbosity is set to level 2 or higher, the token is written in clear text to the pod...

6.3CVSS5.3AI score0.00501EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/08/11 7:22 p.m.•20 views

CVE-2026-71845

A flaw was found in insights-client. The setDefault function logs the value of every environment variable it processes, including CCXTOKEN, a bearer credential used in disconnected cluster deployments. When glog verbosity is set to level 2 or higher, the token is written in clear text to the pod...

6.3CVSS5.3AI score0.00501EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/11 7:22 p.m.•51 views

CVE-2026-71845 Insights-client: insights-client: ccx_token bearer credential logged in clear text at startup via setdefault()

A flaw was found in insights-client. The setDefault function logs the value of every environment variable it processes, including CCXTOKEN, a bearer credential used in disconnected cluster deployments. When glog verbosity is set to level 2 or higher, the token is written in clear text to the pod...

6.3CVSS0.00501EPSS
SaveExploits0References8
CVE
CVE
•added 2026/08/11 7:22 p.m.•45 views

CVE-2026-71845

A flaw in insights-client causes the setDefault() function to log the value of every environment variable it processes, including CCX_TOKEN , a bearer credential used in disconnected cluster deployments . When glog verbosity is set to level 2 or higher, the token is written in clear text to the p...

7.7CVSS5.8AI score0.00501EPSS
SaveExploits0References8Affected Software2
RedhatCVE
RedhatCVE
•added 2026/08/11 7:22 p.m.•16 views

CVE-2026-71845

A flaw was found in insights-client. The setDefault function logs the value of every environment variable it processes, including CCXTOKEN, a bearer credential used in disconnected cluster deployments. When glog verbosity is set to level 2 or higher, the token is written in clear text to the pod...

7.7CVSS5.7AI score0.00501EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•5 views

CVE-2026-71845: Insertion of Sensitive Information into Log File

A flaw was found in insights-client. The setDefault function logs the value of every environment variable it processes, including CCXTOKEN, a bearer credential used in disconnected cluster deployments. When glog verbosity is set to level 2 or higher, the token is written in clear text to the pod...

7.7CVSS5.7AI score0.00501EPSS
SaveExploits0References4
Rows per page
Query Builder