Vulnerability Description
rhc-chk.rb in Red Hat OpenShift Origin before 1.1, when -d (debug mode) is used, outputs the password and other sensitive information in cleartext, which allows context-dependent attackers to obtain sensitive information, as demonstrated by including log files or Bugzilla reports in support channels.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Openshift | <= 1.0 |
| Redhat | Openshift Origin | 1.0.5 |
Related Weaknesses (CWE)
References
- http://rhn.redhat.com/errata/RHSA-2013-0220.htmlVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=889062
- http://rhn.redhat.com/errata/RHSA-2013-0220.htmlVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=889062
FAQ
What is CVE-2012-5658?
CVE-2012-5658 is a vulnerability with a CVSS score of 2.1 (LOW). rhc-chk.rb in Red Hat OpenShift Origin before 1.1, when -d (debug mode) is used, outputs the password and other sensitive information in cleartext, which allows context-dependent attackers to obtain s...
How severe is CVE-2012-5658?
CVE-2012-5658 has been rated LOW with a CVSS base score of 2.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-5658?
Check the references section above for vendor advisories and patch information. Affected products include: Redhat Openshift, Redhat Openshift Origin.