漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive in the way it specified CORS allowed origins during installation. An attacker, able to man-in-the-middle the connection between the user's browser and the openshift console, could use this flaw to perform a phishing attack. The main threat from this vulnerability is data confidentiality.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N
Vulnerability Type
不正确的正则表达式
Vulnerability Title
Red Hat OpenShift Container Platform openshift-ansible 安全漏洞
Vulnerability Description
Red Hat OpenShift Container Platform和OpenShift Ansible都是美国红帽(Red Hat)公司的产品。Red Hat OpenShift Container Platform是一套可帮助企业在物理、虚拟和公共云基础架构之间开发、部署和管理现有基于容器的应用程序的应用平台。OpenShift Ansible是一款OpenShift(一套PaaS云计算平台)安装和配置管理工具。 openshift-ansible中存在安全漏洞,该漏洞源于在安装过程中指定CORS
CVSS Information
N/A
Vulnerability Type
N/A