Vulnerability · Published May 12, 2020 · Assigned by redhat

CVE-2020-10706

Medium 6.3

In plain English

A medium-severity security flaw in openshift/openshift-apiserver from [UNKNOWN]. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)0.1%top 97.5% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A flaw was found in OpenShift Container Platform where OAuth tokens are not encrypted when the encryption of data at rest is enabled. This flaw allows an attacker with access to a backup to obtain OAuth tokens and then use them to log into the cluster as any user who logged into the cluster via the WebUI or via the command line in the last 24 hours. Once the backup is older than 24 hours the OAuth tokens are no longer valid.

Affected products (as reported)

Vendor	Product	Versions
[UNKNOWN]	openshift/openshift-apiserver	n/a

Weakness: CWE-312 · Vector: CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10706 x_refsource_CONFIRM