CVE-2021-3684 - AskarLabs CVE Database

CVE-2021-3684

Vendor N/A

Product assisted-installer

Weakness CWE-532 · Sensitive info in logs

Published March 24, 2023

Last update February 25, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A vulnerability was found in OpenShift Assisted Installer. During generation of the Discovery ISO, image pull secrets were leaked as plaintext in the installation logs. An authenticated user could exploit this by re-using the image pull secret to pull container images from the registry as the associated user.

Key dates

02Disclosure timeline

March 24, 2023 CVE published

February 25, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-3684 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/532.html

Related vulnerabilities

04Related CVE

CVE-2024-38321 IBM Business Automation Workflow information disclosure CVE-2025-0736 Org.infinispan-infinispan-parent: exposure of sensitive information in application logs CVE-2019-0004 Juniper ATP: API and device keys are logged in a world-readable permissions file CVE-2021-21597 CVE-2024-33922 WordPress WP Media Cleaner plugin <= 6.7.2 - Sensitive Data Exposure via Log File vulnerability