CVE-2016-3703
published 2016-06-08CVE-2016-3703: Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or pod/proxy API…
PriorityP432medium5.3CVSS 3.0
AVNACHPRLUINSUCHINAN
EPSS
1.19%
64.6th percentile
Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or pod/proxy API for a specific pod, which allows remote attackers to access API credentials in the web browser localStorage via an access_token in the query parameter.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | openshift | — | — |
| redhat | openshift | — | — |
CVSS provenance
nvdv3.05.3MEDIUMCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.03.5LOWAV:N/AC:M/Au:S/C:P/I:N/A:N
vendor_redhat5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-xhrq-h87x-w62q: Red Hat OpenShift Enterprise 3
ghsa_unreviewed·2022-05-17
CVE-2016-3703 [MEDIUM] CWE-284 GHSA-xhrq-h87x-w62q: Red Hat OpenShift Enterprise 3
Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or pod/proxy API for a specific pod, which allows remote attackers to access API credentials in the web browser localStorage via an access_token in the query parameter.
Red Hat
3: Untrusted content loaded via the API proxy can access web console credentials on the same domain
vendor_redhat·2016-05-19·CVSS 5.3
CVE-2016-3703 [MEDIUM] CWE-285 3: Untrusted content loaded via the API proxy can access web console credentials on the same domain
3: Untrusted content loaded via the API proxy can access web console credentials on the same domain
Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or pod/proxy API for a specific pod, which allows remote attackers to access API credentials in the web browser localStorage via an access_token in the query parameter.
An origin validation vulnerability was found in OpenShift Enterprise. An attacker could potentially access API credentials stored in a web browser's localStorage if anonymous access was granted to a service/proxy or pod/proxy API for a specific pod, and an authorized access_token was provided in the query parameter.
No detection rules found.
No public exploits indexed.
2016-06-08
Published