CVE-2012-5622: CSRF
Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/applicationcontroller.rb) in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors.
Other sources
Jeremy Choi of Red Hat reports:
There is no CSRF attack protection mechanism on the web console. While users are authenticated malicious links or scripts provided by attackers can cause unwanted action which the user does not want to do.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5622?
CVE-2012-5622 is categorized as a high severity vulnerability due to its potential for remote attackers to hijack user authentication.
How do I fix CVE-2012-5622?
To fix CVE-2012-5622, update OpenShift to a version that addresses this cross-site request forgery vulnerability.
What systems are affected by CVE-2012-5622?
CVE-2012-5622 affects Red Hat OpenShift version 0.0.5.
What type of vulnerability is CVE-2012-5622?
CVE-2012-5622 is a cross-site request forgery (CSRF) vulnerability.
What are the potential impacts of CVE-2012-5622?
The potential impacts of CVE-2012-5622 include unauthorized access and hijacking of user sessions by remote attackers.