VULNERABILITY INTELLIGENCE

CVE-2013-0196

CVSS score6.5 MEDIUM
EPSS probability0.43%
CISA KEVNot currently listed
Published2019-12-30
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references