CVE-2021-3684
1 advisory.
Go/github.com/openshift/assisted-installer CVE-2021-3684: medium 5.5, EPSS 0.25%
OpenShift Assisted Installer leaks image pull secrets as plaintext in installation logs
Action: Upgrade github.com/openshift/assisted-installer to 1.0.25.1 or later.
go get github.com/openshift/assisted-installer@v1.0.25.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.25.1 | - |
Fixed versions
| 1.0.25.1 |
Sources
- osv: GHSA-g8xm-p2h4-v6jp
- https://nvd.nist.gov/vuln/detail/CVE-2021-3684
- https://github.com/openshift/assisted-installer/commit/2403dad3795406f2c5d923af0894e07bc8b0bdc4
- https://github.com/openshift/assisted-installer/commit/f3800cfa3d64ce6dcd6f7b73f0578bb99bfdaf7a
- https://bugzilla.redhat.com/show_bug.cgi?id=1985962
- https://github.com/openshift/assisted-installer
CVE-2021-3684 · published · modified · JSON