Medium severity5.4NVD Advisory· Published Jul 11, 2019· Updated Jun 17, 2026
CVE-2019-3889
CVE-2019-3889
Description
A reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform versions: openshift-online-3, openshift-enterprise-3.4 through 3.7 and openshift-enterprise-3.9 through 3.11. An attacker could use this flaw to steal authorization data by getting them to click on a malicious link.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*range: >=3.4,<=3.7
- cpe:2.3:a:redhat:openshift_container_platform:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openshift_container_platform:4.2:*:*:*:*:*:*:*
- (no CPE)range: openshift-online-3, openshift-enterprise-3.4 through 3.7 and openshift-enterprise-3.9 through 3.11
Patches
Vulnerability mechanics
References
3- access.redhat.com/errata/RHSA-2019:3722nvdVendor Advisory
- access.redhat.com/errata/RHSA-2019:3770nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.