CVE-2015-8945

Summary

openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the –credentials option is used, which allows local users to obtain sensitive private key information by reading the systemd journal.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2016/07/13/9
• http://www.securityfocus.com/bid/91776
• http://www.openwall.com/lists/oss-security/2016/07/13/10
• https://github.com/openshift/origin/issues/3951

References

• http://www.openwall.com/lists/oss-security/2016/07/13/9
• http://www.securityfocus.com/bid/91776
• http://www.openwall.com/lists/oss-security/2016/07/13/10
• https://github.com/openshift/origin/issues/3951

• ←Previous
• Next→