CVE-2020-1741

A flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive in the way it specified CORS allowed origins during installation. An attacker, able to man-in-the-middle the connection between the user's browser and the openshift console, could use this flaw to perform a phishing attack. The main threat from this vulnerability is data confidentiality.
References
Link Resource
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1741 Issue Tracking Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-04-24 19:15

Updated : 2024-02-04 21:00


NVD link : CVE-2020-1741

Mitre link : CVE-2020-1741

CVE.ORG link : CVE-2020-1741


JSON object : View

Products Affected

redhat

  • openshift_container_platform
CWE
CWE-185

Incorrect Regular Expression

CWE-697

Incorrect Comparison