CVE-2020-1761CWE-358

A flaw was found in the OpenShift web console, where the access token is stored in the browser's local storage

published May 27, 2021

CVSS
—
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

A flaw was found in the OpenShift web console, where the access token is stored in the browser's local storage. An attacker can use this flaw to get the access token via physical access, or an XSS attack on the victim's browser. This flaw affects openshift/console versions before openshift/console-4.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00633 · 49.7th percentile
Weakness
CWE-358 · Improperly Implemented Security Check for Standard
Published
2021-05-27T19:45Z
EPSS history
Timeline
  • 27 MAY 19:45Z
    A flaw was found in the OpenShift web console, where the access token is stored in the browser's local storage
    cvelistv5