VDB

RHSA-2021%3A0037

RHSA-2021%3A0037 PUBLISHED CVSS 5.300000190734863 MEDIUM

A flaw was found in kubernetes. If the logging level is to at least 4, and Ceph RBD is configured as a storage provisioner, then Ceph RBD admin secrets can be written to logs. This occurs in kube-controller-manager's logs during provisioning of Ceph RBD persistent claims.

Risk Scores

CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:f146c79e4e589eb623430d567d10af0ced0d2189240149d9f13c77579d1345bc_ppc64le as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:f146c79e4e589eb623430d567d10af0ced0d2189240149d9f13c77579d1345bc_ppc64le
Red Hatopenshift4/ose-cluster-kube-apiserver-operator@sha256:504da5258afc4afac659857e70a337c18169144f8b64481ccd6a2a26582f3497_amd64 as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-cluster-kube-apiserver-operator@sha256:504da5258afc4afac659857e70a337c18169144f8b64481ccd6a2a26582f3497_amd64
Red Hatopenshift4/ose-coredns@sha256:412ccb7128ac6a60f3dd54c2dcd326d745a69be714d3fe6cdc2e5f4af53b487d_ppc64le as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-coredns@sha256:412ccb7128ac6a60f3dd54c2dcd326d745a69be714d3fe6cdc2e5f4af53b487d_ppc64le
Red Hatopenshift4/ose-thanos-rhel8@sha256:ea619fe2a41f6c224bbc5ba1bba8f59ae4539d8e2bdb831b4b15c0b10476bd74_amd64 as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-thanos-rhel8@sha256:ea619fe2a41f6c224bbc5ba1bba8f59ae4539d8e2bdb831b4b15c0b10476bd74_amd64
Red Hatopenshift4/ose-operator-registry@sha256:05f77aaaef2c50b48104d4e5e2556871d3837afeb4338b2a812a3a164f9e225b_s390x as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-operator-registry@sha256:05f77aaaef2c50b48104d4e5e2556871d3837afeb4338b2a812a3a164f9e225b_s390x
Red Hatopenshift4/ose-jenkins-agent-base@sha256:f6c5da214bc8e599f6771cad89777df6b1cb89ce750fbd5606e4bd1964192a33_s390x as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-jenkins-agent-base@sha256:f6c5da214bc8e599f6771cad89777df6b1cb89ce750fbd5606e4bd1964192a33_s390x
Red Hatopenshift4/ose-csi-snapshot-controller@sha256:898fba4ba119db95cfa4f90a4db23e69775781d7bb783073464ea0d9cc5c5597_s390x as a component of Red Hat OpenShift Container Platform 4.6*
Red Hatopenshift4/ose-grafana@sha256:dc08275a7e7f8d876c357d843125cee3b33eded0aa78c8767f83913edfa5af80_s390x as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-grafana@sha256:dc08275a7e7f8d876c357d843125cee3b33eded0aa78c8767f83913edfa5af80_s390x
Red Hatopenshift4/ose-hyperkube@sha256:713aec5c6ee4e4446ca39beef6727d94553eae27379f5dc42b06c45f638d6ac6_ppc64le as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-hyperkube@sha256:713aec5c6ee4e4446ca39beef6727d94553eae27379f5dc42b06c45f638d6ac6_ppc64le
Red Hatopenshift4/ose-csi-driver-manila-rhel8@sha256:f9e6a372752e7b15e9a6f79fbecc13db58310ca4c385dd591a7baca662649acd_amd64 as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-csi-driver-manila-rhel8@sha256:f9e6a372752e7b15e9a6f79fbecc13db58310ca4c385dd591a7baca662649acd_amd64
Red Hatopenshift4/ose-haproxy-router@sha256:c9111d07dc78da5747c16a56010e094ba4c210d2c92fc2fc06a2885944e9ee74_ppc64le as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-haproxy-router@sha256:c9111d07dc78da5747c16a56010e094ba4c210d2c92fc2fc06a2885944e9ee74_ppc64le
Red Hatopenshift4/ose-installer-artifacts@sha256:bd0af68dbfcfb75737232f0f338029247259495ed28ef3393ce3dc371432e9af_ppc64le as a component of Red Hat OpenShift Container Platform 4.6*
Red Hatopenshift4/ose-cluster-kube-scheduler-operator@sha256:9b1306f480e063fe19e1f481efcb72410767e1946fcfe5070bfb0958b7d9e905_amd64 as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-cluster-kube-scheduler-operator@sha256:9b1306f480e063fe19e1f481efcb72410767e1946fcfe5070bfb0958b7d9e905_amd64
Red Hatopenshift4/ose-console-operator@sha256:1317c24e93aef02f854ead55bc19e9d703f7bb3a279ca3a13de65804c9606144_amd64 as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-console-operator@sha256:1317c24e93aef02f854ead55bc19e9d703f7bb3a279ca3a13de65804c9606144_amd64
Red Hatopenshift4/ose-cluster-autoscaler@sha256:833e6813486932d58349f86fc9041cb0b0c2cd708ab0d0ff09e72787565d9f88_s390x as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-cluster-autoscaler@sha256:833e6813486932d58349f86fc9041cb0b0c2cd708ab0d0ff09e72787565d9f88_s390x
Red Hatopenshift4/ose-sdn-rhel8@sha256:b563cbf4ebabf29bcf9d31c37be009e3eb567fe01a8acc80517b0f623380865b_ppc64le as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-sdn-rhel8@sha256:b563cbf4ebabf29bcf9d31c37be009e3eb567fe01a8acc80517b0f623380865b_ppc64le
Red Hatopenshift4/ose-haproxy-router@sha256:458d69c1815c9363a6ffe7c87ad561a88df671ed9ec13e69aff027987ec252be_s390x as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-haproxy-router@sha256:458d69c1815c9363a6ffe7c87ad561a88df671ed9ec13e69aff027987ec252be_s390x
Red Hatopenshift4/ose-kube-proxy@sha256:9701a5b9b45d9672e58841d115d66a7bde4111737ec797ca8e2f4d6b74c58c61_amd64 as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-kube-proxy@sha256:9701a5b9b45d9672e58841d115d66a7bde4111737ec797ca8e2f4d6b74c58c61_amd64
Red Hatopenshift4/ose-cluster-authentication-operator@sha256:a178acd2587386ba6c39b137b43319ece89c0a7c107c83374e116362af1cafa2_ppc64le as a component of Red Hat OpenShift Container Platform 4.6*
Red Hatopenshift4/ose-multus-cni@sha256:8792172922dcc1828938358afd91cc3906f4d69475d9e91ca2134bb10d95618b_s390x as a component of Red Hat OpenShift Container Platform 4.6openshift4/ose-multus-cni@sha256:8792172922dcc1828938358afd91cc3906f4d69475d9e91ca2134bb10d95618b_s390x

…and 339 more

Timeline

  • Jan 18, 2021 CVE Published
  • Apr 30, 2026 CVE Updated
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Security Advisory
  • May 1, 2026 Security Advisory
  • May 1, 2026 Security Advisory
Open in Interactive Console →
$ Console Community · 100/wk Open console ›