CVE-2020-10752

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2020-10752

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-10752.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2020-10752

Published

2020-06-12T23:15:10.367Z

Modified

2026-07-08T05:55:40.113786931Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

A flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens by leaking them into the logs when an API Server panic occurred. This flaw allows an attacker with the ability to cause an API Server error to read the logs, and use the leaked OAuthToken to log into the API Server with the leaked token.

Database specific

{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "4.0"
                },
                {
                    "last_affected": "4.0"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "redhat:openshift_container_platform",
            "cpes": [
                "cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*"
            ]
        }
    ]
}

References

Affected packages

Git / github.com/openshift/origin

Affected ranges

Type

GIT

Repo

https://github.com/openshift/origin

Events

Introduced

0cbc58b117403b9d9169dbafdfac59ef104bb997

Last affected

0cbc58b117403b9d9169dbafdfac59ef104bb997

Database specific

{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "3.11"
        },
        {
            "last_affected": "3.11"
        }
    ]
}

Affected versions

3.*

3.11

v3.*

v3.11.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-10752.json"