Vulnerability in Redhat Openshift
CVE-2012-5658
rhc-chk.rb in Red Hat OpenShift Origin before 1.1, when -d (debug mode) is used, outputs the password and other sensitive information in cleartext, which allows context-dependent attackers to obtain sensitive information, as demonstrated b…
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.001 (19.9th percentile) — read the EPSS interpretation.
Affected products
- Redhat Openshift
- Redhat Openshift_origin — versions 1.0.5
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- RHSA-2013:0220 (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2012-5658?
- CVE-2012-5658 is a vulnerability in Redhat Openshift, classified under Cryptographic Issues. Published 2013-02-24.
- Is CVE-2012-5658 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.