CVE-2020-1741
24.04.2020, 19:15
A flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive in the way it specified CORS allowed origins during installation. An attacker, able to man-in-the-middle the connection between the user's browser and the openshift console, could use this flaw to perform a phishing attack. The main threat from this vulnerability is data confidentiality.Enginsight
| Vendor | Product | Version |
|---|---|---|
| redhat | openshift_container_platform | 3.11 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-185 - Incorrect Regular ExpressionThe software specifies a regular expression in a way that causes data to be improperly matched or compared.
- CWE-697 - Incorrect ComparisonThe software compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.