REDHAT-BUG-1777209: Low severity red hat openshift container platform vulnerability
During installation of an OpenShift 4 cluster, the openshift-install command line tool creates an auth directory, with kubeconfig and kubeadmin-password files. Both files contain credentials used to authenticate to the OpenShift API server, and are incorrectly assigned word-readable permissions.
In contrast, the oc command line tool creates configuration files that are only readable by the current user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1777209?
REDHAT-BUG-1777209 is classified as a high severity vulnerability due to the exposure of sensitive credentials.
How do I fix REDHAT-BUG-1777209?
To fix REDHAT-BUG-1777209, ensure that the `auth` directory and its files have restricted permissions, making them inaccessible to unwanted users.
What are the main risks associated with REDHAT-BUG-1777209?
The main risks include unauthorized access to the OpenShift API server and potential compromises to cluster security.
What files are involved in REDHAT-BUG-1777209?
The files involved in REDHAT-BUG-1777209 are `kubeconfig` and `kubeadmin-password`, which contain sensitive authentication credentials.
Is REDHAT-BUG-1777209 specific to certain OpenShift versions?
Yes, REDHAT-BUG-1777209 affects specific versions of Red Hat OpenShift during the installation process.