CVE-2023-4958 | BDVDB-2026-218964 Detail

Description#

In Red Hat Advanced Cluster Security (RHACS), it was found that some security related HTTP headers were missing, allowing an attacker to exploit this with a clickjacking attack. An attacker could exploit this by convincing a valid RHACS user to visit an attacker-controlled web page, that deceptively points to valid RHACS endpoints, hijacking the user's account permissions to perform other actions.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-12-12Record published in the CVE List.
2. Version 22024-08-02Most recent update recorded in the CVE List.