Information Disclosure

2019-01-1509:11:35

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

atomic-openshift is vulnerable to information disclosure attacks. The vulnerability exists as Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master-config.yaml configuration file, which allows local users to obtain Active Directory credentials by reading the file.

CPENameOperatorVersion
atomic-openshifteq3.1.1.6__4.git.32.adf8ec9.el7aos
atomic-openshifteq3.1.1.6__4.git.21.cd70c35.el7aos
atomic-openshifteq3.1.0.4__1.git.15.5e061c3.el7aos
atomic-openshifteq3.1.0.4__1.git.10.ec10652.el7aos
atomic-openshifteq3.1.1.6__1.git.0.b57e8bd.el7aos
atomic-openshifteq3.1.0.4__1.git.4.b6c7cd2.el7aos
atomic-openshifteq3.1.1.6__3.git.16.5327e56.el7aos
atomic-openshifteq3.1.1.6__4.git.32.adf8ec9.el7aos
atomic-openshifteq3.1.1.6__4.git.21.cd70c35.el7aos
atomic-openshifteq3.1.0.4__1.git.15.5e061c3.el7aos

Name	Operator	Version
atomic-openshift	eq	3.1.1.6__4.git.32.adf8ec9.el7aos
atomic-openshift	eq	3.1.1.6__4.git.21.cd70c35.el7aos
atomic-openshift	eq	3.1.0.4__1.git.15.5e061c3.el7aos
atomic-openshift	eq	3.1.0.4__1.git.10.ec10652.el7aos
atomic-openshift	eq	3.1.1.6__1.git.0.b57e8bd.el7aos
atomic-openshift	eq	3.1.0.4__1.git.4.b6c7cd2.el7aos
atomic-openshift	eq	3.1.1.6__3.git.16.5327e56.el7aos
atomic-openshift	eq	3.1.1.6__4.git.32.adf8ec9.el7aos
atomic-openshift	eq	3.1.1.6__4.git.21.cd70c35.el7aos
atomic-openshift	eq	3.1.0.4__1.git.15.5e061c3.el7aos