CVE-2023-3361

Katalog CVE

CVSS 7.5 · High EPSS 0,47%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada opendatahub open data hub dashboard, redhat openshift data science. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as Python DSL or YAML, it reads S3 credentials from the cluster (ds pipeline server) and saves them in plain text in the generated output instead of an ID for a Kubernetes secret.

Rincian

Terbit di NVD

4 Oktober 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-319: Cleartext Transmission of Sensitive Information

EPSS (30 hari)

0,47% peluang dieksploitasi; lebih tinggi dari 38,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2023-3361 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2216588 issue tracking · advisory pihak ketiga
• https://github.com/opendatahub-io/odh-dashboard/issues/1415 issue tracking