CVE-2020-10743CWE-358

It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in an iframe, which made it possible to intercept and manipulate…

published June 2, 2021

CVSS
—
EPSS
1%
Percentile
53.1
In the wild
Unconfirmed
What it is

It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in an iframe, which made it possible to intercept and manipulate requests. This flaw allows an attacker to trick a user into performing arbitrary actions in OCP's distribution of Kibana, such as clickjacking.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00713 · 53.1th percentile
Weakness
CWE-358 · Improperly Implemented Security Check for Standard
Published
2021-06-02T10:54Z
EPSS history
Timeline
  • 02 JUN 10:54Z
    It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in an iframe, which made it possible to intercept and manipulate…
    cvelistv5