CVE-2021-3684: Medium severity red hat openshift assisted installer vulnerability
A vulnerability was found in OpenShift Assisted Installer. During generation of the Discovery ISO, image pull secrets were leaked as plaintext in the installation logs. An authenticated user could exploit this by re-using the image pull secret to pull container images from the registry as the associated user.
Other sources
A vulnerability was found in the Openshift API - Assisted Installer application. The Discovery ISO leaks the Image Pull Secret through several log files.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-3684?
CVE-2021-3684 is a vulnerability found in OpenShift Assisted Installer that leaks image pull secrets as plaintext in installation logs.
How does CVE-2021-3684 affect OpenShift Assisted Installer?
CVE-2021-3684 affects OpenShift Assisted Installer by exposing image pull secrets in plaintext, which can be exploited by authenticated users to pull container images from the registry.
What is the severity of CVE-2021-3684?
The severity of CVE-2021-3684 is medium with a severity value of 5.5.
How can I fix CVE-2021-3684?
To fix CVE-2021-3684, update OpenShift Assisted Installer to version 1.0.25.1 or higher.
Where can I find more information about CVE-2021-3684?
More information about CVE-2021-3684 can be found in the references: [Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=1985962), [GitHub Commit 1](https://github.com/openshift/assisted-installer/commit/2403dad3795406f2c5d923af0894e07bc8b0bdc4), [GitHub Commit 2](https://github.com/openshift/assisted-installer/commit/f3800cfa3d64ce6dcd6f7b73f0578bb99bfdaf7a).