CVE-2019-10165: Red Hat Openshift Container Platform

Low severity, CVSS 2.3. EPSS: 0.4% chance of exploitation in the next 30 days.

OpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit logs for the Kubernetes API server and OpenShift API server. A user with sufficient privileges could recover OAuth tokens from these audit logs and use them to access other resources.

Affected products

• Red Hat Openshift Container Platform: before 4.1.3 (fixed in 4.1.3)

Published 2019-07-30. Last modified 2026-06-17.