CVE-2015-8945

openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information by reading the systemd journal.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.1 MEDIUM
LOCAL
HIGH
NONE
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 34%
VendorProductVersion
openshiftorigin
𝑥
≤ 1.1.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.openwall.com/lists/oss-security/2016/07/13/10
http://www.openwall.com/lists/oss-security/2016/07/13/9
http://www.securityfocus.com/bid/91776
https://github.com/openshift/origin/issues/3951
http://www.openwall.com/lists/oss-security/2016/07/13/10
http://www.openwall.com/lists/oss-security/2016/07/13/9
http://www.securityfocus.com/bid/91776
https://github.com/openshift/origin/issues/3951