CVE-2024-1139

{"id": "CVE-2024-1139", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.0, "exploitabilityScore": 3.1}]}, "published": "2024-04-25T17:15:47.650", "references": [{"url": "https://access.redhat.com/errata/RHSA-2024:1887", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1891", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:2047", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:2782", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2024-1139", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2262158", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1887", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1891", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2024:2047", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2024:2782", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/security/cve/CVE-2024-1139", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2262158", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a repository pull secret."}, {"lang": "es", "value": "Se encontr\u00f3 una vulnerabilidad de fuga de credenciales en el operador de monitoreo de cl\u00faster en OCP. Este problema puede permitir que un atacante remoto que tenga credenciales de inicio de sesi\u00f3n b\u00e1sicas verifique el manifiesto del pod para descubrir un secreto de extracci\u00f3n del repositorio."}], "lastModified": "2024-11-21T08:49:52.997", "sourceIdentifier": "secalert@redhat.com"}