Description
A vulnerability was found in Red Hat OpenShift Jenkins. The bearer token is not obfuscated in the logs and potentially carries a high risk if those logs are centralized when collected. The token is typically valid for one year. This flaw allows a malicious user to jeopardize the environment if they have access to sensitive information.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Jenkins openshift-sync-plugin
Default version status: unaffected
0 to < 1.1.0.818.v3883b_3b_df89a_affected
Red Hat OpenShift Developer Tools and Services
Default version status: affected