openshift github.com/openshift/assisted-installer vulnerabilities

Latest openshift github.com/openshift/assisted-installer CVEs

Newest publication first

1. CVE-2021-3684 OpenShift Assisted Installer leaks image pull secrets as plaintext in installation logs

   Published 2023-03-24

   Medium·CVSS 5.5 EPSS 0.25%

   A vulnerability was found in OpenShift Assisted Installer. During generation of the Discovery ISO, image pull secrets were leaked as plaintext in the installation logs. An authenticated user could exploit this by re-using the image pull secret to pull container images from the re...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.