Threats tagged 'ghsa-6q5x-r3rm-rpv8'

A vulnerability in insights-client causes it to log request headers when receiving non-200 responses. These headers may include the cloud.openshift.com pull-secret token, a long-lived credential. A local user with access to pod logs on the hub could read this token, potentially gaining unauthorized access to Red Hat cloud services.