Beveiligingsadvies

CVE-2020-1741

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-04-24 18:34:07

Laatst bijgewerkt 2024-08-04 06:46:30

Toegewezen door redhat

CVSS-score 5.9

Status PUBLISHED

Beschrijving

A flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive in the way it specified CORS allowed origins during installation. An attacker, able to man-in-the-middle the connection between the user's browser and the openshift console, could use this flaw to perform a phishing attack. The main threat from this vulnerability is data confidentiality.

← Alle CVE's bekijken Bekijk op cve.org ↗