CVEvulnerability

CVE-2020-10743

4.3 MEDIUM Published 2021-06-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-06-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-1021, CWE-358

Description

It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in an iframe, which made it possible to intercept and manipulate requests. This flaw allows an attacker to trick a user into performing arbitrary actions in OCP's distribution of Kibana, such as clickjacking.

Affected configurations

• elastic kibana • redhat openshift container platform 3.11.286 • redhat openshift container platform 4.6.1

Related

Weakness · CWE (2)

  • CWE-1021 Improper Restriction of Rendered UI Layers or Frames weakness
  • CWE-358 Improperly Implemented Security Check for Standard weakness

References