Threats tagged 'ghsa-h2jx-ffv3-pwqm'

A vulnerability in insights-client's setDefault() function causes sensitive environment variables, including the CCX_TOKEN bearer token, to be logged in clear text when glog verbosity is set to level 2 or higher. This token exposure in pod logs can allow attackers with access to logs to obtain credentials and gain unauthorized access to the CCX API.