CVE-2012-5622

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2012-5622
Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller.rb) in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors.

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://osvdb.org/88333
http://rhn.redhat.com/errata/RHSA-2012-1555.html Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=883227
https://github.com/openshift/origin-server/commit/1ad0d1d792395306b59a34ad7b6e7e89a35d041e Patch
https://github.com/openshift/origin-server/pull/1009
Configurations

Configuration 1 (hide)

cpe:2.3:a:redhat:openshift:0.0.5:*:*:*:*:*:*:*
History

13 Feb 2023, 00:26

Type Values Removed Values Added
References
  • {'url': 'https://access.redhat.com/security/cve/CVE-2012-5622', 'name': 'https://access.redhat.com/security/cve/CVE-2012-5622', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2012:1555', 'name': 'https://access.redhat.com/errata/RHSA-2012:1555', 'tags': [], 'refsource': 'MISC'}
Summary CVE-2012-5622 openshift-console: CSRF attack Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller.rb) in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors.

02 Feb 2023, 16:15

Type Values Removed Values Added
References
  • (MISC) https://access.redhat.com/security/cve/CVE-2012-5622 -
  • (MISC) https://access.redhat.com/errata/RHSA-2012:1555 -
Summary Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller.rb) in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors. CVE-2012-5622 openshift-console: CSRF attack
Information

Published : 2012-12-18 01:55

Updated : 2023-12-10 11:16

NVD link : CVE-2012-5622

Mitre link : CVE-2012-5622

CVE.ORG link : CVE-2012-5622

JSON object : View

Products Affected

redhat

  • openshift
CWE
CWE-352

Cross-Site Request Forgery (CSRF)