Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2019-14860

Опубликовано: 29 окт. 2019
Источник: redhat
CVSS3: 7.4
EPSS Низкий

Описание

It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins. An attacker could use this lack of protection to conduct phishing attacks and further access unauthorized information.

Дополнительная информация

Статус:

Important
Дефект:
CWE-942
https://bugzilla.redhat.com/show_bug.cgi?id=1761912syndesis: default CORS configuration is allow all

EPSS

Процентиль: 51%
0.00278
Низкий

7.4 High

CVSS3

Связанные уязвимости

CVSS3: 6.5
nvd
почти 6 лет назад

It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins. An attacker could use this lack of protection to conduct phishing attacks and further access unauthorized information.

github
больше 3 лет назад

It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins. An attacker could use this lack of protection to conduct phishing attacks and further access unauthorized information.

CVSS3: 7.4
fstec
почти 6 лет назад

Уязвимость конфигурации Syndesis платформы Red Hat Jboss Fuse, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 51%
0.00278
Низкий

7.4 High

CVSS3