Red Hat Web-Console vulnerabilities

1 known vulnerability affecting red_hat/web-console.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2019-3876MEDIUMCVSS 6.3vaffects OpenShift Container Platform version v3.0 through v3.112019-04-01

CVE-2019-3876 [MEDIUM] CWE-352 CVE-2019-3876: A flaw was found in the /oauth/token/request custom endpoint of the OpenShift OAuth server allowing A flaw was found in the /oauth/token/request custom endpoint of the OpenShift OAuth server allowing for XSS generation of CLI tokens due to missing X-Frame-Options and CSRF protections. If not otherwise prevented, a separate XSS vulnerability via JavaScript could further allow for the extraction of these tokens.