netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-x5m7-63c6-fx79

Browse Source
This commit is contained in:
advisory-database[bot]
2025-04-17 14:32:27 +00:00
parent f212dea2f6
commit 4cda3a1ab8
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/04/GHSA-x5m7-63c6-fx79/GHSA-x5m7-63c6-fx79.json
+4 -3
View File
@@ -1,13 +1,14 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x5m7-63c6-fx79",
"modified": "2024-05-17T00:31:00Z",
"modified": "2025-04-17T14:30:39Z",
"published": "2024-04-25T18:30:39Z",
"withdrawn": "2025-04-17T14:30:39Z",
"aliases": [
"CVE-2024-1139"
],
"summary": "Cluster Monitoring Operator contains a credentials leak",
"details": "A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a repository pull secret.",
"summary": "Withdrawn Advisory: Cluster Monitoring Operator contains a credentials leak",
"details": "# Withdrawn Advisory\nThis advisory has been withdrawn because the vulnerability does not affect a package in the Go registry. For more information, see the discussion [here](https://github.com/github/advisory-database/pull/5467#issuecomment-2812187822). This link is maintained to preserve external references.\n\n# Original Description\n\nA credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a repository pull secret.",
"severity": [
{
"type": "CVSS_V3",