CVE-2019-10176mediumCWE-352

CVE-2019-10176: medium-severity vulnerability in RedHat atomic-openshift

Published · Updated

Follow this CVE+ Monitor atomic-openshift

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.2epss 0.5%
A flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the cluster console component were found to remain static during a user's session. An attacker with the ability to observe the value of this token would be able to re-use the token to perform a CSRF attack.
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Affected products
RedHat · atomic-openshift