CVE-2024-1139
No fix known EPSS <1%CVSS 7.7
A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a repository pull secret.
Products: Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat OpenShift Container Platform 3.11
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/openshift/cluster-monitoring-operator | no fix |