Lucene search
K

9 matches found

OSV
OSV
added 2023/10/04 12:15 p.m.3 views

CVE-2023-3361

A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as Python DSL or YAML, it reads S3 credentials from the cluster ds pipeline server and saves them in plain text in the generated output instead of an ID for a Kubernetes secret...

7.5CVSS5.7AI score0.00041EPSS
Exploits0References3
NVD
NVD
added 2023/10/04 12:15 p.m.10 views

CVE-2023-3361

A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as Python DSL or YAML, it reads S3 credentials from the cluster ds pipeline server and saves them in plain text in the generated output instead of an ID for a Kubernetes secret...

7.7CVSS7.6AI score0.00041EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2023/10/04 12:15 p.m.1 views

CVE-2023-3361

A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as Python DSL or YAML, it reads S3 credentials from the cluster ds pipeline server and saves them in plain text in the generated output instead of an ID for a Kubernetes secret...

7.7CVSS5.7AI score0.00041EPSS
Exploits0References4
Prion
Prion
added 2023/10/04 12:15 p.m.14 views

Design/Logic Flaw

A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as Python DSL or YAML, it reads S3 credentials from the cluster ds pipeline server and saves them in plain text in the generated output instead of an ID for a Kubernetes secret...

5CVSS7.5AI score0.00041EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/04 11:34 a.m.9 views

CVE-2023-3361 S3 credentials included when exporting elyra notebook

A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as Python DSL or YAML, it reads S3 credentials from the cluster ds pipeline server and saves them in plain text in the generated output instead of an ID for a Kubernetes secret...

7.7CVSS7.1AI score0.00041EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/07/11 12:0 a.m.3 views

PT-2023-24404 · Red Hat · Red Hat Openshift Data Science

Name of the Vulnerable Software and Affected Versions: Red Hat OpenShift Data Science affected versions not specified Description: A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as Python DSL or YAML, it reads S3 credentials...

7.7CVSS7.4AI score0.00041EPSS
Exploits0References10
RedhatCVE
RedhatCVE
added 2023/06/22 1:16 a.m.23 views

CVE-2023-3361

A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as Python DSL or YAML, it reads S3 credentials from the cluster ds pipeline server and saves them in plain text in the generated output instead of an ID for a Kubernetes secret...

7.5CVSS6.8AI score0.00041EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/06/20 12:0 a.m.2 views

Red Hat OpenShift 安全漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. A security vulnerability exists in Red Hat OpenShift Data Science that originates from saving generated credentials in plain text...

7.7CVSS7.3AI score0.00041EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/02/28 12:0 a.m.2 views

Red Hat OpenShift 安全漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying, and running applications. A security vulnerability exists in Red Hat OpenShift Data Science version 1.22.1. An attacker has exploited the vulnerability to caus...

9.8CVSS8.4AI score0.00137EPSS
Exploits0References7
Rows per page
Query Builder