exploitDog

CVE-2012-5622

Опубликовано: 10 дек. 2012

Источник: redhat

CVSS2: 5.1

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller.rb) in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors.

Ссылки на источники

https://www.cve.org/CVERecord?id=CVE-2012-5622
https://nvd.nist.gov/vuln/detail/CVE-2012-5622

Дополнительная информация

Статус:

Important

Дефект:

CWE-352

https://bugzilla.redhat.com/show_bug.cgi?id=883227openshift-console: CSRF attack

EPSS

Процентиль: 47%

0.00664

Низкий

5.1 Medium

CVSS2

Связанные уязвимости

CVE-2012-5622

nvd

больше 13 лет назад

Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller.rb) in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors.

GHSA-7v88-g335-x4p8

github

около 4 лет назад

Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller.rb) in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors.

EPSS

Процентиль: 47%

0.00664

Низкий

5.1 Medium

CVSS2