exploitDog

CVE-2012-5622

Опубликовано: 10 дек. 2012

Источник: redhat

CVSS2: 5.1

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller.rb) in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors.

Ссылки на источники

Дополнительная информация

Статус:

Important

Дефект:

CWE-352

https://bugzilla.redhat.com/show_bug.cgi?id=883227openshift-console: CSRF attack

EPSS

Процентиль: 38%

0.00164

Низкий

5.1 Medium

CVSS2

Связанные уязвимости

CVE-2012-5622

nvd

около 13 лет назад

Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller.rb) in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors.

GHSA-7v88-g335-x4p8

github

больше 3 лет назад

Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller.rb) in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors.

EPSS

Процентиль: 38%

0.00164

Низкий

5.1 Medium

CVSS2