Vulnerabilities > CVE-2019-10176 - Unspecified vulnerability in Redhat Openshift Container Platform 3.11/4.1

047910
CVSS 5.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
redhat
NVD
Published: 2019-08-02
Updated: 2024-11-21

Summary

A flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the cluster console component were found to remain static during a user's session. An attacker with the ability to observe the value of this token would be able to re-use the token to perform a CSRF attack.

Vulnerable Configurations

Part Description Count
Application
Redhat
2

Redhat

advisories
  • rhsa
    idRHSA-2019:2792
  • rhsa
    idRHSA-2019:4053

References