CVE-2012-5622 — Cross-Site Request Forgery in Redhat Openshift

CWE-352 — Cross-Site Request Forgery5 documents5 sources
Severity
6.8MEDIUMNVD
EPSS
0.2%
top 62.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Redhat Openshift
Timeline
PublishedDec 18
Latest updateMay 17

Description

Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller.rb) in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

▶NVDredhat/openshift0.0.5

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-7v88-g335-x4p8: Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller↗2022-05-17
▶
CVEList
CVE-2012-5622: Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller↗2012-12-18
▶

📋Vendor Advisories

1
Red Hat
openshift-console: CSRF attack↗2012-12-10
▶

💬Community

1
Bugzilla
CVE-2012-5622 openshift-console: CSRF attack↗2012-12-04
▶
CVE-2012-5622 — Cross-Site Request Forgery in Redhat | cvebase