Lucene search
Veracode Vulnerability DatabaseVERACODE:21697HistoryOct 15, 2019 - 2:41 a.m.
Information Disclosure
2019-10-1502:41:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
34.6%
github.com/openshift/library-go is vulnerable to information disclosure. Unsanitized secret data is written to the static pod logs when the log level in a given operator is set to Debug or higher. A low privileged user could read pod logs to discover secret material if the log level has already been modified in an operator by a privileged user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/openshift/library-go | eq | HEAD | |
| github.com/openshift/library-go | eq | HEAD |
References
access.redhat.com/errata/RHSA-2019:4075
access.redhat.com/errata/RHSA-2019:4081
access.redhat.com/errata/RHSA-2019:4091
access.redhat.com/errata/RHSA-2019:4098
access.redhat.com/security/cve/CVE-2019-14854
bugzilla.redhat.com/show_bug.cgi?id=1758953
bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14854
github.com/openshift/library-go/pull/549
Related
redhat
redhat
cvelist
cvelist
CVE-2019-14854
2020-01-07 16:36:45
cve
cve
CVE-2019-14854
2020-01-07 17:15:11
symantec
symantec
prion
prion
Code injection
2020-01-07 17:15:00
redhatcve
redhatcve
CVE-2019-14854
2020-04-05 11:09:51
osv
osv
CVE-2019-14854
2020-01-07 17:15:11
nvd
nvd
CVE-2019-14854
2020-01-07 17:15:11