CVE-2023-3361
S3 credentials included when exporting elyra notebook
CVSS Score
7.7
EPSS Score
0.0%
EPSS Percentile
0th
A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as Python DSL or YAML, it reads S3 credentials from the cluster (ds pipeline server) and saves them in plain text in the generated output instead of an ID for a Kubernetes secret.
| CWE | CWE-200 |
| Vendor | n/a |
| Product | odh-dashboard |
| Published | Oct 4, 2023 |
| Last Updated | Sep 19, 2024 |
Stay Ahead of the Next One
Get instant alerts for n/a odh-dashboard
Be the first to know when new high vulnerabilities affecting n/a odh-dashboard are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
n/a / odh-dashboard
All versions affected Red Hat / Red Hat OpenShift Data Science (RHODS)
All versions affected