github.com/openshift/library-go is vulnerable to information disclosure. Unsanitized secret data is written to the pod logs when the log level in a given operator is set to Debug or higher. A low privileged user could read pod logs to discover secret material if the log level has already been modified in an operator by a privileged user.
CPE | Name | Operator | Version |
---|---|---|---|
github.com/openshift/library-go | eq | HEAD | |
github.com/openshift/library-go | eq | HEAD |