CVE-2024-1139

Published: Apr 25, 2024Modified: Jun 17, 2026Deferred

7.7

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Exploitability: 3.1 / Impact: 4.0

Source: secalert@redhat.com (Secondary)

Description

A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a repository pull secret.

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

https://access.redhat.com/errata/RHSA-2024:1887

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:1891

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:2047

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:2782

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2024-1139

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2262158

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:1887