Vulnerability Details CVE-2017-15138
The OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker with sufficient privileges to view confidential webhook tokens.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.2%
CVSS Severity
CVSS v3 Score 5.0
CVSS v2 Score 4.0
References
Products affected by CVE-2017-15138
-
cpe:2.3:a:redhat:openshift_container_platform:3.9