ID |
CVE-2020-1741
|
Summary |
A flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive in the way it specified CORS allowed origins during installation. An attacker, able to man-in-the-middle the connection between the user's browser and the openshift console, could use this flaw to perform a phishing attack. The main threat from this vulnerability is data confidentiality. |
References |
|
Vulnerable Configurations |
|
CVSS |
Base: | 4.0 (as of 12-02-2023 - 23:40) |
Impact: | |
Exploitability: | |
|
CWE |
CWE-185 |
CAPEC |
-
Argument Injection
An attacker changes the behavior or state of a targeted application through injecting data or command syntax through the targets use of non-validated and non-filtered arguments of exposed services or methods.
-
Using Slashes in Alternate Encoding
This attack targets the encoding of the Slash characters. An attacker would try to exploit common filtering problems related to the use of the slashes characters to gain access to resources on the target host. Directory-driven systems, such as file systems and databases, typically use the slash character to indicate traversal between directories or other container components. For murky historical reasons, PCs (and, as a result, Microsoft OSs) choose to use a backslash, whereas the UNIX world typically makes use of the forward slash. The schizophrenic result is that many MS-based systems are required to understand both forms of the slash. This gives the attacker many opportunities to discover and abuse a number of common filtering problems. The goal of this pattern is to discover server software that only applies filters to one version, but not the other.
-
Command Delimiters
An attack of this type exploits a programs' vulnerabilities that allows an attacker's commands to be concatenated onto a legitimate command with the intent of targeting other resources such as the file system or database. The system that uses a filter or a blacklist input validation, as opposed to whitelist validation is vulnerable to an attacker who predicts delimiters (or combinations of delimiters) not present in the filter or blacklist. As with other injection attacks, the attacker uses the command delimiter payload as an entry point to tunnel through the application and activate additional attacks through SQL queries, shell commands, network scanning, and so on.
|
Access |
Vector | Complexity | Authentication |
NETWORK |
HIGH |
NONE |
|
Impact |
Confidentiality | Integrity | Availability |
PARTIAL |
PARTIAL |
NONE |
|
cvss-vector
via4
|
AV:N/AC:H/Au:N/C:P/I:P/A:N
|
redhat
via4
|
rpms | - jenkins-0:2.235.2.1597220898-1.el7
- jenkins-2-plugins-0:3.11.1597310986-1.el7
- openshift-ansible-0:3.11.272-1.git.0.79ab6e9.el7
- openshift-ansible-docs-0:3.11.272-1.git.0.79ab6e9.el7
- openshift-ansible-playbooks-0:3.11.272-1.git.0.79ab6e9.el7
- openshift-ansible-roles-0:3.11.272-1.git.0.79ab6e9.el7
- openshift-ansible-test-0:3.11.272-1.git.0.79ab6e9.el7
- python2-rsa-0:4.5-2.el7
|
|
refmap
via4
|
|
Last major update |
12-02-2023 - 23:40 |
Published |
24-04-2020 - 19:15 |
Last modified |
12-02-2023 - 23:40 |