Security Advisory

CVE-2020-1741

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-04-24 18:34:07

Last updated 2024-08-04 06:46:30

Assigner redhat

State PUBLISHED

Description

A flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive in the way it specified CORS allowed origins during installation. An attacker, able to man-in-the-middle the connection between the users browser and the openshift console, could use this flaw to perform a phishing attack. The main threat from this vulnerability is data confidentiality.

← Browse all CVEs View on cve.org ↗