Red Hat Security Advisory

RHSA-2012:1555

openshift-console security update

Released 2012-12-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Enterprise Infrastructure openshift-console-0.0.5-3.el6

Fixes 1 record

TI-2012-04725 CVE-2012-5622 · GHSA-7v88-g335-x4p8

Cross-site request forgery (CSRF) vulnerability in the management console…

LOW 31

Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller.rb) in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00658 Published 2012-12-18 Fixed CWE-352