Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:3989
HistoryApr 27, 2017 - 7:13 a.m.

Information Disclosure

2017-04-2707:13:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

0.001 Low

EPSS

Percentile

28.7%

github.com/openshift/origin is vulnerable to information disclosure. When a pod is used with the --credentials option is used, a local attacker can get private key information by reading the systemd journal. This is because when the `–credential`` option is enabled, the router credentials are stored insecurely as envvars.

0.001 Low

EPSS

Percentile

28.7%

Related for VERACODE:3989