CVE-2015-8945

Severity: medium (CVSS 5.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-08-05 · updated 2026-06-17
Weakness: CWE-255

Description

openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information by reading the systemd journal.

Affected products

Openshift Origin: through 1.1.6

References

http://www.openwall.com/lists/oss-security/2016/07/13/10
http://www.openwall.com/lists/oss-security/2016/07/13/9
http://www.securityfocus.com/bid/91776
https://github.com/openshift/origin/issues/3951
http://www.openwall.com/lists/oss-security/2016/07/13/10
http://www.openwall.com/lists/oss-security/2016/07/13/9
http://www.securityfocus.com/bid/91776
https://github.com/openshift/origin/issues/3951

Get alerted when CVE-2015-8945 or the next vulnerability affects your stack