Thom Carlin

**Name of the Vulnerable Software and Affected Versions** OpenShift versions 4.2 **Description** The issue arises during the installation of an OpenShift 4 cluster, where the `openshift-install` command line tool creates an `auth` directory. This directory contains `kubeconfig` and `kubeadmin-password` files, which hold credentials for authenticating to the OpenShift API server. However, these files are incorrectly assigned word-readable permissions, potentially exposing the credentials. **Recommendations** For OpenShift version 4.2, ensure the `kubeconfig` and `kubeadmin-password` files have appropriate permissions to prevent unauthorized access. Consider restricting access to these files until a proper fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foreman versions prior to 6.2 **Description** The issue allows local users with access to the system journal to obtain the root password by reading the system journal or by clicking Logs on the console, when the ssh service has been enabled on discovered nodes and discovery-debug is used to log in. This occurs because the root password is displayed in plaintext in the system journal. **Recommendations** For versions prior to 6.2, consider disabling the ssh service on discovered nodes or restricting access to the system journal to minimize the risk of exploitation. As a temporary workaround, avoid using the discovery-debug feature until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Red Hat QuickStart Cloud Installer (QCI) versions prior to 1.0 GA **Description** The issue concerns a file, `/var/lib/ovirt-engine/setup/engine-DC-config.py`, created by Red Hat QuickStart Cloud Installer (QCI) that is world readable and contains the root password of the deployed system. **Recommendations** For versions prior to 1.0 GA, update to version 1.0 GA or later to resolve the issue. As a temporary workaround, consider changing the permissions of the `/var/lib/ovirt-engine/setup/engine-DC-config.py` file to restrict read access.

**Name of the Vulnerable Software and Affected Versions** Red Hat QuickStart Cloud Installer (QCI) (affected versions not specified) **Description** The issue concerns the Red Hat QuickStart Cloud Installer (QCI) using world-readable permissions for the /etc/qci/answers file. This allows local users to obtain the root password for the deployed system by reading the file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foreman versions prior to 1.11.4 Foreman versions 1.12.x prior to 1.12.1 **Description** The issue allows remote authenticated users with permission to view some hosts to obtain sensitive host configuration information. This is possible because access to preview provisioning templates is not properly restricted. **Recommendations** For Foreman versions prior to 1.11.4, update to version 1.11.4 or later. For Foreman versions 1.12.x prior to 1.12.1, update to version 1.12.1 or later.