CVE-2020-1741: Medium severity redhat OpenShift Container Platform vulnerability
A flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive in the way it specified CORS allowed origins during installation. An attacker, able to man-in-the-middle the connection between the user's browser and the openshift console, could use this flaw to perform a phishing attack. The main threat from this vulnerability is data confidentiality.
Other sources
OpenShift Container Platform (OCP) 3.11 was too permissive in the way it specified CORS allowed origins during installation. An attacker able to man-in-the-middle the connection between the user's browser and the openshift console could use this flaw to perform a phishing attack.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/openshift-ansibleto a version that resolves this vulnerability.Fixed in 0:3.11.272-1.git.0.79ab6e9.el7 - Configuration
Edit master-config.yaml on master nodes and ensure corsAllowedOrigins entries use explicit, protocol-anchored regexes in the form '^((?i)https://...)' (for example 'corsAllowedOrigins:\n- ^(?i)https://my\.subdomain\.domain\.com(:|\z)') and do NOT use protocol-relative patterns such as '(?i)//my\.subdomain\.domain\.com(:|\z)'. Replace any protocol-relative entries with explicit https patterns.
OpenShift master (master-config.yaml) corsAllowedOrigins = corsAllowedOrigins:\n- ^(?i)https://my\.subdomain\.domain\.com(:|\z)
Event History
Frequently Asked Questions
What is the vulnerability ID of this flaw?
The vulnerability ID is CVE-2020-1741.
What is the severity of CVE-2020-1741?
The severity of CVE-2020-1741 is medium, with a severity value of 5.9.
What is the affected software of CVE-2020-1741?
The affected software is openshift-ansible version 3.11.272-1.git.0.79ab6e9.el7.
How can an attacker exploit CVE-2020-1741?
An attacker, able to man-in-the-middle the connection between the user's browser and the openshift console, could exploit CVE-2020-1741.
Is there a fix available for CVE-2020-1741?
Yes, a fix is available for CVE-2020-1741. Upgrade to openshift-ansible version 3.11.272-1.git.0.79ab6e9.el7 or higher.