CVE-2016-3703 | BDVDB-2026-76317 Detail

Description#

Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or pod/proxy API for a specific pod, which allows remote attackers to access API credentials in the web browser localStorage via an access_token in the query parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://access.redhat.com/errata/RHSA-2016:1094
https://access.redhat.com/errata/RHSA-2016:1095

Exploit#

No public exploit known

History#

Version 12016-06-08Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.