CVE-2020-10743

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-10743
It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in an iframe, which made it possible to intercept and manipulate requests. This flaw allows an attacker to trick a user into performing arbitrary actions in OCP's distribution of Kibana, such as clickjacking.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://bugzilla.redhat.com/show_bug.cgi?id=1834550 Issue Tracking Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:elastic:kibana:-:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:redhat:openshift_container_platform:3.11.286:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_container_platform:4.6.1:*:*:*:*:*:*:*
History

12 Feb 2023, 23:39

Type Values Removed Values Added
References
  • {'url': 'https://access.redhat.com/errata/RHSA-2020:4298', 'name': 'https://access.redhat.com/errata/RHSA-2020:4298', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/security/cve/CVE-2020-10743', 'name': 'https://access.redhat.com/security/cve/CVE-2020-10743', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2020:3727', 'name': 'https://access.redhat.com/errata/RHSA-2020:3727', 'tags': [], 'refsource': 'MISC'}
CWE CWE-1021 CWE-358

02 Feb 2023, 21:19

Type Values Removed Values Added
References
  • (MISC) https://access.redhat.com/errata/RHSA-2020:4298 -
  • (MISC) https://access.redhat.com/security/cve/CVE-2020-10743 -
  • (MISC) https://access.redhat.com/errata/RHSA-2020:3727 -

05 Aug 2022, 15:19

Type Values Removed Values Added
CWE CWE-358 CWE-1021

10 Jun 2021, 18:24

Type Values Removed Values Added
CWE CWE-358
CVSS v2 : unknown
v3 : unknown 		v2 : 4.3
v3 : 4.3
CPE cpe:2.3:a:elastic:kibana:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_container_platform:3.11.286:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_container_platform:4.6.1:*:*:*:*:*:*:*
References (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1834550 - (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1834550 - Issue Tracking, Vendor Advisory

02 Jun 2021, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2021-06-02 11:15

Updated : 2023-12-10 13:55

NVD link : CVE-2020-10743

Mitre link : CVE-2020-10743

CVE.ORG link : CVE-2020-10743

JSON object : View

Products Affected

elastic

  • kibana

redhat

  • openshift_container_platform
CWE
CWE-358

Improperly Implemented Security Check for Standard

CWE-1021

Improper Restriction of Rendered UI Layers or Frames