Red Hat · Openshift Cluster Monitoring Operator · CVE-2024-1139
**Name of the Vulnerable Software and Affected Versions**
OpenShift Cluster Monitoring Operator (affected versions not specified)
**Description**
A credentials leak issue was discovered in the cluster monitoring operator, potentially allowing a remote attacker with basic login credentials to access the pod manifest and discover a repository pull secret.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.