Information Disclosure

2023-04-0412:38:07

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

github

assisted-installer

information disclosure

ops.go

image pull secrets

plaintext

installation logs

attacker

pull secret token

software

EPSS

Percentile

15.5%

JSON

github.com/openshift/assisted-installer is vulnerable to Information Disclosure. The vulnerability exists in ops.go due to the leakage of image pull secrets as plaintext in installation logs which allows an attacker to gain access to the pull secret token information.