Skip to content
fr Sign in
6.1 Medium

CVE-2023-4958 In Red Hat Advanced Cluster Security (RHACS), it was found that some security related HTTP headers were missing,…

Description

In Red Hat Advanced Cluster Security (RHACS), it was found that some security related HTTP headers were missing, allowing an attacker to exploit this with a clickjacking attack. An attacker could exploit this by convincing a valid RHACS user to visit an attacker-controlled web page, that deceptively points to valid RHACS endpoints, hijacking the user's account permissions to perform other actions.

Affected products and versions

Product Affected versions Fixed in
Red Hat Advanced Cluster Security 4.2 4.2 earliest → < 4.2.0-6 4.2.0-6
Red Hat Advanced Cluster Security 3 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat Advanced Cluster Security 4.2

The 5 CVEs of Red Hat Advanced Cluster Security 4.2 →
CVE-2023-5870 A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the… 2.2 Low CVE-2023-5869 Postgresql: buffer overrun from integer overflow in array modification 8.8 High CVE-2023-5868 Postgresql: memory disclosure in aggregate function calls 4.3 Medium CVE-2023-39417 IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or… 7.5 High
Track this CVE