MEDIUMVulnerability
CVE-2026-71474
A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, which can include the cloud.openshift.com pull-secret token. A local user with access to pod logs on the hub could read this long-lived credential. This information disclosure could grant unauthorized access to Red Hat cloud services.
Properties
- severity
- MEDIUM
- score
- 6.3
- cve_id
- CVE-2026-71474
- vector
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
- published_at
- 2026-08-11T20:18:45.547
- last_modified
- 2026-08-24T16:41:20.487
Related Entities (4)
HAS_WEAKNESS (1)
→[Weakness]Insertion of Sensitive Information into Log File
DESCRIBED_BY (1)
→[Source]NVD
AFFECTS_PRODUCT (2)
→[Product]
→[Product]
Explore deeper with Ninja Signal's threat intelligence graph