Skip to content
Sign in
4.6 Medium

CVE-2019-3889 A reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform versions: openshift-online-3,…

Description

A reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform versions: openshift-online-3, openshift-enterprise-3.4 through 3.7 and openshift-enterprise-3.9 through 3.11. An attacker could use this flaw to steal authorization data by getting them to click on a malicious link.

Affected products and versions

Product Affected versions Fixed in
atomic-openshift Versions not published

Other CVEs of atomic-openshift

The 3 CVEs of atomic-openshift →
CVE-2019-3884 A vulnerability exists in the garbage collection mechanism of atomic-openshift 3.6 Low CVE-2018-14632 An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift… 7.7 High
Track this CVE