Information Disclosure

2019-01-1509:11:31

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

40.9%

JSON

atomic-openshift is vulnerable to information disclosure. An origin validation vulnerability was found in OpenShift Enterprise. An attacker could potentially access API credentials stored in a web browser’s localStorage if anonymous access was granted to a service/proxy or pod/proxy API for a specific pod, and an authorized access_token was provided in the query parameter.

CPENameOperatorVersion
atomic-openshifteq3.2.0.20__1.git.0.f44746c.el7
atomic-openshifteq3.1.1.6__1.git.0.b57e8bd.el7aos
atomic-openshifteq3.1.1.6__6.git.43.f583589.el7aos
atomic-openshifteq3.1.1.6__3.git.16.5327e56.el7aos
atomic-openshifteq3.1.0.4__1.git.15.5e061c3.el7aos
atomic-openshifteq3.1.1.6__4.git.21.cd70c35.el7aos
atomic-openshifteq3.1.1.6__4.git.32.adf8ec9.el7aos
atomic-openshifteq3.1.0.4__1.git.10.ec10652.el7aos
atomic-openshifteq3.1.0.4__1.git.4.b6c7cd2.el7aos
nodejs-node-uuideq1.4.3__1.el7aos

Name	Operator	Version
atomic-openshift	eq	3.2.0.20__1.git.0.f44746c.el7
atomic-openshift	eq	3.1.1.6__1.git.0.b57e8bd.el7aos
atomic-openshift	eq	3.1.1.6__6.git.43.f583589.el7aos
atomic-openshift	eq	3.1.1.6__3.git.16.5327e56.el7aos
atomic-openshift	eq	3.1.0.4__1.git.15.5e061c3.el7aos
atomic-openshift	eq	3.1.1.6__4.git.21.cd70c35.el7aos
atomic-openshift	eq	3.1.1.6__4.git.32.adf8ec9.el7aos
atomic-openshift	eq	3.1.0.4__1.git.10.ec10652.el7aos
atomic-openshift	eq	3.1.0.4__1.git.4.b6c7cd2.el7aos
nodejs-node-uuid	eq	1.4.3__1.el7aos