CVE-2015-8945: Openshift Origin

Medium severity, CVSS 5.1. EPSS: 0.4% chance of exploitation in the next 30 days.

openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information by reading the systemd journal.

Affected products

• Openshift Origin: up to and including 1.1.6

Published 2016-08-05. Last modified 2026-06-17.