CVE-2013-0196

A CSRF issue was found in OpenShift Enterprise 1.2

published December 30, 2019

CVSS
—
EPSS
0%
Percentile
36.7
In the wild
Unconfirmed
What it is

A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00435 · 36.7th percentile
Published
2019-12-30T21:17Z
EPSS history
Timeline
  • 30 DEC 21:17Z
    A CSRF issue was found in OpenShift Enterprise 1.2
    cvelistv5