Kritik CVSS 9.9
CVE-2026-5483: Openshift Ai: güvenlik açığı
Açıklama (NVD)
A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.
Özet bilgiler
- Ürün
- Redhat Openshift Ai
- CVSS v3.1
- 9.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - EPSS
- %0,49 (yüzdelik 42)
- CWE
- CWE-201
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| redhat-openshift-ai | 2.16 | — | 2.16.4 |
| redhat-openshift-ai | 2.25 | — | 2.25.4 |
| redhat-openshift-ai | 3.2 | 3.2 | — |
| redhat-openshift-ai | 3.3 | 3.3 | — |