A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat OpenShift AI 2.16 | — |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| red hat | red hat openshift ai | mitre_affected | 90% |
| red hat | red hat openshift ai (rhoai) | mitre_affected | 90% |
| red hat | openshift | cert_advisory | 90% |
