Sensitive Token Exposure in IBM Cloud Private by IBM

CVE-2019-4284

What is CVE-2019-4284?

A vulnerability in IBM Cloud Private allows local privileged users to access sensitive OpenID Connect (OIDC) tokens logged in the system log files. The exposure of these tokens poses a significant risk as they can be utilized to impersonate other users, granting unauthorized access to the system. It's crucial for organizations using affected versions to implement necessary security updates to mitigate potential risks associated with this issue.

References