8.2
CVSSv3

CVE-2020-10712

Published: 22/04/2020 Updated: 12/02/2023
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
CVSS v3 Base Score: 8.2 | Impact Score: 4.2 | Exploitability Score: 3.9
VMScore: 570
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Vulnerability Summary

A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highest threat from this vulnerability is to data integrity.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

redhat openshift container platform

Vendor Advisories

Synopsis Important: OpenShift Container Platform 4319 ose-cluster-image-registry-operator-container security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 4319 is now available withupdates to packages and images that fix several bugs and add enhance ...
Synopsis Important: OpenShift Container Platform 444 security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 444 is now available withupdates to packages and images that fix several bugsRed Hat Product Security has rated this update as having a secu ...
Synopsis Important: OpenShift Container Platform 4233 security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 4233 is now available withupdates to packages and images that fix several bugsRed Hat Product Security has rated this update as having a se ...