CVE-2012-5622 | BDVDB-2026-53840 Detail

Description#

Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller.rb) in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://bugzilla.redhat.com/show_bug.cgi?id=883227
http://rhn.redhat.com/errata/RHSA-2012-1555.html
http://osvdb.org/88333
https://github.com/openshift/origin-server/pull/1009
https://github.com/openshift/origin-server/commit/1ad0d1d792395306b59a34ad7b6e7e89a35d041e

Exploit#

No public exploit known

History#

Version 12012-12-18Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.