Approved changes feed: RSS · Atom

cpe:2.3:a:red_hat:openshift-ansible:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRed Hat (a3686528-5679-55c9-b393-abe45df26bd2)
ProductOpenshift Ansible (47ad846d-b47c-5f76-807c-ab80c4adaa4b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-1741 vulnerable 2026-06-08 05:21:02.943282 Details available
MEDIUM (5.9)
A flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive in the way it specified CORS allowed origins during installation. An attacker, able to man-in-the-middle the connection between the user's browser and the openshift console, could use this flaw to perform a phishing attack. The main threat from this vulnerability is data confidentiality.
Published: 2020-04-24T18:34:07.000Z
Updated: 2024-08-04T06:46:30.884Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.