CVE-2020-10743

Katalog CVE

CVSS 4.3 · Medium EPSS 0,71%

Kerentanan Improperly Implemented Security Check for Standard pada elastic kibana, redhat openshift container platform. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in an iframe, which made it possible to intercept and manipulate requests. This flaw allows an attacker to trick a user into performing arbitrary actions in OCP's distribution of Kibana, such as clickjacking.

Rincian

Terbit di NVD

2 Juni 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-358: Improperly Implemented Security Check for Standard
CWE-1021: Improper Restriction of Rendered UI Layers or Frames

EPSS (30 hari)

0,71% peluang dieksploitasi; lebih tinggi dari 52,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=1834550 issue tracking · advisory vendor