CVE-2024-9453: Jenkins-image: sensitive data disclosure when using openshift jenkins image
A vulnerability was found in Red Hat OpenShift Jenkins. The bearer token is not obfuscated in the logs and potentially carries a high risk if those logs are centralized when collected. The token is typically valid for one year. This flaw allows a malicious user to jeopardize the environment if they have access to sensitive information.
Other sources
A vulnerability was found in Red Hat Openshift Jenkins. The bearer Token is not obfuscated in the logs and therefor carries a high potential risk in particular if those logs are centralized collected. The Token is typically valid for one year and with the target of Jenkins permissions very powerful.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9453?
CVE-2024-9453 is considered a high-severity vulnerability due to the exposure of bearer tokens in logs.
How can I fix CVE-2024-9453?
To fix CVE-2024-9453, ensure that bearer tokens are obfuscated in your logging configurations.
What software does CVE-2024-9453 affect?
CVE-2024-9453 affects Red Hat OpenShift Jenkins and Jenkins Jenkins.
What risks are associated with CVE-2024-9453?
The risks associated with CVE-2024-9453 include unauthorized access to systems using the exposed bearer tokens.
How long is the bearer token valid in CVE-2024-9453?
In CVE-2024-9453, the bearer token typically remains valid for one year.