cve.bz

CVE-2019-10165

2.3 lowEPSS 0.4%

Low (2.3) in redhat openshift container platform. EPSS 0.4% chance of exploitation in the next 30 days.

OpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit logs for the Kubernetes API server and OpenShift API server. A user with sufficient privileges could recover OAuth tokens from these audit logs and use them to access other resources.

Severity

CVSS 3.1

2.3 low
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
EPSS
0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE
CWE-532
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON