CVE-2015-8945

MEDIUM

Openshift Origin < 1.1.6 - Credentials Management

Title source: rule

Description

openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information by reading the systemd journal.

References (4)

Scores

CVSS v3 5.1
EPSS 0.0013
EPSS Percentile 32.9%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-255
Status draft

Affected Products (1)

openshift/origin < 1.1.6

Timeline

Published Aug 05, 2016
Tracked Since Feb 18, 2026