CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.7. It affects Kubernetes. Public exploit code or proof-of-concept references have been detected in its references.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
GitHub PoC Links
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2023-3361
Severity
HIGH
CVSS
7.7
EPSS
0.47%
Kubernetes
Original NVD Description
A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as Python DSL or YAML, it reads S3 credentials from the cluster (ds pipeline server) and saves them in plain text in the generated output instead of an ID for a Kubernetes secret.
Related CVEs
Other vulnerabilities affecting the same vendor(s)