CVE-2020-1761

    Dashboard / Vulnerabilities / CVE-2020-1761

    CVE-2020-1761

    Published: 27 May 2021Last Modified: 29 Nov 2023

    Summary:

    Details: A flaw was found in the OpenShift web console, where the access token is stored in the browser's local storage. An attacker can use this flaw to get the access token via physical access, or an XSS attack on the victim's browser. This flaw affects openshift/console versions before openshift/console-4.

    References: https://bugzilla.redhat.com/show_bug.cgi?id=1813788

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -3f48c49e491365e882d5f7410d336e65b5c4056e

    Affected versions

    v1.0.0
    v1.0.1
    v1.0.2
    v1.0.3
    v1.0.4
    v1.0.5
    v1.0.6
    v1.0.7
    v1.0.8

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2020-1761 | CVE-DB