CVEvulnerability
CVE-2013-0196
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-12-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-352
Description
A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser.
Affected configurations
• redhat openshift 1.2
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- https://access.redhat.com/security/cve/cve-2013-0196 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0196 Exploit, Issue Tracking, Third Party Advisory
- https://access.redhat.com/security/cve/cve-2013-0196 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0196 Exploit, Issue Tracking, Third Party Advisory