Aller au contenu
en Se connecter
6.1 Moyenne

CVE-2023-4958 In Red Hat Advanced Cluster Security (RHACS), it was found that some security related HTTP headers were missing,…

Description

In Red Hat Advanced Cluster Security (RHACS), it was found that some security related HTTP headers were missing, allowing an attacker to exploit this with a clickjacking attack. An attacker could exploit this by convincing a valid RHACS user to visit an attacker-controlled web page, that deceptively points to valid RHACS endpoints, hijacking the user's account permissions to perform other actions.

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat Advanced Cluster Security 4.2 4.2 premières → < 4.2.0-6 4.2.0-6
Red Hat Advanced Cluster Security 3 Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat Advanced Cluster Security 4.2

Les 5 CVE de Red Hat Advanced Cluster Security 4.2 →
CVE-2023-5870 A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the… 2.2 Faible CVE-2023-5869 Postgresql: buffer overrun from integer overflow in array modification 8.8 Élevée CVE-2023-5868 Postgresql: memory disclosure in aggregate function calls 4.3 Moyenne CVE-2023-39417 IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or… 7.5 Élevée
Suivre cette CVE