Cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*

A misconfiguration in the OpenShift insights-operator ClusterRole grants the 'gather' service account cluster-wide read access to secrets, enabling privilege escalation for attackers who can spawn pods with that identity.