Medium severity6.5NVD Advisory· Published Dec 30, 2019· Updated Jun 16, 2026

CVE-2013-0196

Description

A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Red Hat/Openshift
cpe:2.3:a:redhat:openshift:1.2:*:*:*:enterprise:*:*:*
Openshift/OpenShift Enterprisellm-create
Range: <=1.2
OpenShift/OpenShift Enterprisev5
Range: 1.2

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cginvdExploitIssue TrackingThird Party Advisory
access.redhat.com/security/cve/cve-2013-0196nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000