Unrated severityNVD Advisory· Published Apr 24, 2020· Updated Aug 4, 2024

CVE-2020-1741

Description

A flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive in the way it specified CORS allowed origins during installation. An attacker, able to man-in-the-middle the connection between the user's browser and the openshift console, could use this flaw to perform a phishing attack. The main threat from this vulnerability is data confidentiality.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Red Hat/Openshift Container Platformllm-fuzzy
Range: =3.11
Red Hat/Openshiftcpe-rescue
Range: openshift-ansible-3.11

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cgimitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000