CVE-2020-10743

It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in an iframe, which made it possible to intercept and manipulate requests. This flaw allows an attacker to trick a user into performing arbitrary actions in OCP's distribution of Kibana, such as clickjacking.
References
Link Resource
https://bugzilla.redhat.com/show_bug.cgi?id=1834550 Issue Tracking Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:elastic:kibana:-:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:redhat:openshift_container_platform:3.11.286:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_container_platform:4.6.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-06-02 11:15

Updated : 2024-02-28 18:28


NVD link : CVE-2020-10743

Mitre link : CVE-2020-10743

CVE.ORG link : CVE-2020-10743


JSON object : View

Products Affected

redhat

  • openshift_container_platform

elastic

  • kibana
CWE
CWE-358

Improperly Implemented Security Check for Standard

CWE-1021

Improper Restriction of Rendered UI Layers or Frames