CVE-2021-3528

CVE-2021-3528 is a high-severity vulnerability affecting Red Hat noobaa-operator versions prior to 5.7.0. It involves the leakage of internal RPC AuthTokens into log files, which an attacker with log access could exploit to gain unauthorized access and modify system configurations within the noobaa deployment. The vulnerability has a CVSS score of 8.8, indicating a network-exploitable flaw with low privileges required, leading to high confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.