CVE-2019-10213
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-10213
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
OpenShift Container Platform, versions 4.1 and 4.2, does not sanitize secret data written to pod logs when the log level in a given operator is set to Debug or higher. A low privileged user could read pod logs to discover secret material if the log level has already been modified in an operator by a privileged user.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
日志输出的转义处理不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Red Hat OpenShift Container Platform 日志信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat OpenShift Container Platform是美国红帽（Red Hat）公司的一套可帮助企业在物理、虚拟和公共云基础架构之间开发、部署和管理现有基于容器的应用程序的应用平台。 Red Hat OpenShift Container Platform 4.1版本和4.2版本中存在日志信息泄露漏洞。该漏洞源于程序将敏感数据写入到pod日志中。攻击者可利用该漏洞获取敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2019-10213
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-10213
请登录查看更多情报信息。
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10213x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2019-10213
Same Patch Batch · Red Hat · 2019-11-25 · 5 CVEs total
| CVE-2019-10224 | Red Hat 389 Directory Server 信息泄露漏洞 | |
| CVE-2019-14825 | Katello 安全漏洞 | |
| CVE-2019-10207 | Linux kernel 安全漏洞 | |
| CVE-2019-10217 | Ansible 信息泄露漏洞 |
IV. Related Vulnerabilities
Same vendor: Red Hat
- CVE-2026-42011
Gnutls: gnutls: security bypass due to incorrect name constr - CVE-2026-42010
Gnutls: gnutls: authentication bypass via nul character in u - CVE-2026-6420
Keylime: keylime: security bypass due to hardcoded tpm quote - CVE-2026-34956
Openvswitch: open vswitch: denial of service via malformed f - CVE-2026-34002
Xorg: xwayland: x.org x server: information disclosure or de
Same weakness: CWE-117
- CVE-2026-6494
Aap-mcp-server: aap mcp server: log injection allows social - CVE-2025-14684
IBM Maximo Application Suite - Monitor Component uses Log Fo - CVE-2025-59784
Log Pollution - Control Characters Not Escaped - CVE-2025-12755
Multiple vulnerabilities in IBM MQ Operator and Queue manage - CVE-2025-11537
Keycloak-server: sensitive headers shown in the http access
V. Comments for CVE-2019-10213
No comments yet