Unrated severityNVD Advisory· Published Jul 11, 2019· Updated Aug 4, 2024

CVE-2019-3889

Description

A reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform versions: openshift-online-3, openshift-enterprise-3.4 through 3.7 and openshift-enterprise-3.9 through 3.11. An attacker could use this flaw to steal authorization data by getting them to click on a malicious link.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Red Hat/Openshift Container Platformllm-fuzzy
Range: openshift-online-3, openshift-enterprise-3.4 through 3.7, openshift-enterprise-3.9 through 3.11
Red Hat/Openshiftcpe-rescue
Range: openshift-online-3, openshift-enterprise-3.4 through 3.7 and openshift-enterprise-3.9 through 3.11

Patches

Vulnerability mechanics

References

access.redhat.com/errata/RHSA-2019:3722mitrevendor-advisoryx_refsource_REDHAT
access.redhat.com/errata/RHSA-2019:3770mitrevendor-advisoryx_refsource_REDHAT
bugzilla.redhat.com/show_bug.cgimitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000