CVE-2019-10176CWE-352

A flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the cluster console component were found to remain…

Medium · published August 2, 2019

CVSS v3.0
4.2
EPSS
1%
Percentile
44.9
In the wild
Unconfirmed
What it is

A flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the cluster console component were found to remain static during a user's session. An attacker with the ability to observe the value of this token would be able to re-use the token to perform a CSRF attack.

The record
Technical detail
CVSS v3.0
4.2 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00549 · 44.9th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2019-08-02T13:51Z
EPSS history
Timeline
  • 02 AUG 13:51Z
    A flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the cluster console component were found to remain…
    cvelistv5