CVE-2015-8945

State: Published
Severity: Not scored
Published: Aug 5, 2016
Updated: Aug 6, 2024
Reserved: Jul 13, 2016

Description

openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information by reading the systemd journal.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

[oss-security] 20160713 CVE Request: openshift-node is logging private RSA keys to the systemd journalmailing-list
91776vdb-entry
[oss-security] 20160713 Re: CVE Request: openshift-node is logging private RSA keys to the systemd journalmailing-list
https://github.com/openshift/origin/issues/3951

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.