CVE-2019-10165 Information disclosure in openshift
Privileged users can recover OAuth tokens from plaintext audit logs to access other resources in OpenShift Container Platform.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-10165?
CVE-2019-10165 is a low-severity vulnerability in Redhat Openshift Container Platform, published on 30 Jul 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
OpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit logs for the Kubernetes API server and OpenShift API server. A user with sufficient privileges could recover OAuth tokens from these audit logs and use them to access other resources.
Weakness: CWE-532
Which versions are affected by CVE-2019-10165?
It affects 1 product.
Products include Redhat Openshift Container Platform.
How do I fix CVE-2019-10165?
No fix has been published for CVE-2019-10165 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-10165 being exploited?
There is no known exploitation of CVE-2019-10165 in the wild and no public exploit code.
Other vulnerabilities in Redhat Openshift Container Platform
- CVE-2020-27836 Missing authorization in cluster-ingress-operator
- CVE-2018-1085 Misconfiguration in openshift-ansible
- CVE-2026-54099 Privilege escalation in Red Hat OpenShift Container Platform 4
- CVE-2026-1784 Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection
- CVE-2021-20182 Privilege escalation in openshift
Sources
Also known as GHSA-252g-gw8q-x2cc.