CVE-2020-10712

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-10712
A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highest threat from this vulnerability is to data integrity.

8.2 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

6.4 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10712 Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*
History

12 Feb 2023, 22:15

Type Values Removed Values Added
Summary A flaw was found in OpenShift Container Platform versions from 4.1 to 4.4 inclusive. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highest threat from this vulnerability is to data integrity. A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highest threat from this vulnerability is to data integrity.
References
  • {'url': 'https://access.redhat.com/errata/RHSA-2020:2026', 'name': 'https://access.redhat.com/errata/RHSA-2020:2026', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/security/cve/CVE-2020-10712', 'name': 'https://access.redhat.com/security/cve/CVE-2020-10712', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2020:2136', 'name': 'https://access.redhat.com/errata/RHSA-2020:2136', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1825161', 'name': 'https://bugzilla.redhat.com/show_bug.cgi?id=1825161', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2020:2009', 'name': 'https://access.redhat.com/errata/RHSA-2020:2009', 'tags': [], 'refsource': 'MISC'}

02 Feb 2023, 21:19

Type Values Removed Values Added
Summary A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highest threat from this vulnerability is to data integrity. A flaw was found in OpenShift Container Platform versions from 4.1 to 4.4 inclusive. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highest threat from this vulnerability is to data integrity.
References
  • (MISC) https://access.redhat.com/errata/RHSA-2020:2026 -
  • (MISC) https://access.redhat.com/security/cve/CVE-2020-10712 -
  • (MISC) https://access.redhat.com/errata/RHSA-2020:2136 -
  • (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1825161 -
  • (MISC) https://access.redhat.com/errata/RHSA-2020:2009 -
Information

Published : 2020-04-22 16:15

Updated : 2023-12-10 13:27

NVD link : CVE-2020-10712

Mitre link : CVE-2020-10712

CVE.ORG link : CVE-2020-10712

JSON object : View

Products Affected

redhat

  • openshift_container_platform
CWE
CWE-532

Insertion of Sensitive Information into Log File