| Package | Affected versions | Patched versions |
|---|---|---|
| openshift | ≤ 1.0 | |
| openshift origin | = 1.0.5 |
rhc-chk.rb in Red Hat OpenShift Origin before 1.1, when -d (debug mode) is used, outputs the password and other sensitive information in cleartext, which allows context-dependent attackers to obtain sensitive information, as demonstrated by including log files or Bugzilla reports in support channels.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free