Lucene search
PRIOn knowledge basePRION:CVE-2020-1741HistoryApr 24, 2020 - 7:15 p.m.
Design/Logic Flaw
2020-04-2419:15:00
PRIOn knowledge base
www.prio-n.com
2
A flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive in the way it specified CORS allowed origins during installation. An attacker, able to man-in-the-middle the connection between the user’s browser and the openshift console, could use this flaw to perform a phishing attack. The main threat from this vulnerability is data confidentiality.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openshift_container_platform | eq | 3.11 |
Related
veracode
veracode
Man-in-the-Middle (MitM)
2020-08-28 02:13:17
cvelist
cvelist
CVE-2020-1741
2020-04-24 18:34:07
cve
cve
CVE-2020-1741
2020-04-24 19:15:12
osv
osv
CVE-2020-1741
2020-04-24 19:15:12
nvd
nvd
CVE-2020-1741
2020-04-24 19:15:12
redhatcve
redhatcve
CVE-2020-1741
2020-03-16 06:10:51
redhat
redhat
nessus
nessus
RHEL 7 : OpenShift Container Platform 3.11 (RHSA-2020:3541)
2020-08-27 00:00:00