CVE-2013-0196 | BDVDB-2026-128348 Detail

OpenShiftOpenShift Enterprise

Description#

A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0196
https://access.redhat.com/security/cve/cve-2013-0196

Exploit#

No public exploit known

History#

Version 12019-12-30Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.