CVE-2019-10213: red hat openshift Improper Output Neutralization for Logs
Vulnerability summary
CVE-2019-10213 is a medium (CVSS 6.5) Improper Output Neutralization for Logs vulnerability in red hat openshift. EPSS estimates a 0.99% chance of exploitation in the next 30 days, higher than 61.9% of scored vulnerabilities.
Timeline
- 25-11-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
OpenShift Container Platform, versions 4.1 and 4.2, does not sanitize secret data written to pod logs when the log level in a given operator is set to Debug or higher. A low privileged user could read pod logs to discover secret material if the log level has already been modified in an operator by a privileged user.
CVSS metrics
4 scores · 2 sources · 3 versions- NVDNIST5.3MediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS trend
Probability
0.99%
Chance of exploitation in the next 30 days
Percentile
62%
Versus all other CVEs
30-day change
0.00 pp
From 0.99% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-117Improper Output Neutralization for LogsThe product constructs a log message from external input, but it does not neutralize or incorrectly neutralizes special elements when the message is written to a log file.
- CWE-532Insertion of Sensitive Information into Log FileThe product writes sensitive information to a log file.
Affected systems
Red hat1 product
- openshiftversions Red Hat OpenShift 4.1 and Red Hat OpenShift 4.2
Redhat1 product
- openshift_container_platform4.1 | 4.2
2 vendors · 2 products
References
3 links- bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10213X Refsource CONFIRMIssue TrackingPatchVendor Advisory