Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2024-11217

Oauth-server-container: oauth-server-container logs client secret in debug level

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A vulnerability was found in the OAuth-server. OAuth-server logs the OAuth2 client secret when the logLevel is Debug higher for OIDC/GitHub/GitLab/Google IDPs login options.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

oauth-server-container

Default version status: unaffected

  • 4.12.* to < *affected
  • 4.13.* to < *affected
  • 4.14.* to < *affected
  • 4.15.* to < *affected
  • 4.16.* to < *affected
  • 4.17.* to < *affected
  • 4.18.* to < *affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

References