Lucene search
PRIOn knowledge basePRION:CVE-2016-3703HistoryJun 08, 2016 - 5:59 p.m.
Design/Logic Flaw
2016-06-0817:59:00
PRIOn knowledge base
www.prio-n.com
2
Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or pod/proxy API for a specific pod, which allows remote attackers to access API credentials in the web browser localStorage via an access_token in the query parameter.
Related
cve
cve
CVE-2016-3703
2016-06-08 17:59:04
redhatcve
redhatcve
CVE-2016-3703
2016-05-19 15:49:10
veracode
veracode
Information Disclosure
2019-01-15 09:11:31
nessus
nessus
RHEL 7 : Red Hat OpenShift Enterprise 3.1 (RHSA-2016:1095)
2018-12-04 00:00:00
RHEL 7 : Red Hat OpenShift Enterprise 3.2 (RHSA-2016:1094)
2018-12-04 00:00:00
redhat
redhat
(RHSA-2016:1095) Moderate: Red Hat OpenShift Enterprise 3.1 security update
2016-05-19 20:30:05
(RHSA-2016:1094) Important: Red Hat OpenShift Enterprise 3.2 security update
2016-05-19 20:02:55
nvd
nvd
CVE-2016-3703
2016-06-08 17:59:04
cvelist
cvelist
CVE-2016-3703
2016-06-08 17:00:00