CVE-2024-1139
Severity:
HIGH
Type:
CWE-200
Information Leak / Disclosure
Publication date:
25/04/2024
Last modified:
26/04/2024
Description
A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a repository pull secret.
Impact
Base Score 3.x
7.70
Severity 3.x
HIGH