CVE-2023-4958

Katalog CVE

CVSS 6.1 · Medium EPSS 0,63%

Kerentanan Improper Restriction of Rendered UI Layers or Frames pada redhat advanced cluster security. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

In Red Hat Advanced Cluster Security (RHACS), it was found that some security related HTTP headers were missing, allowing an attacker to exploit this with a clickjacking attack. An attacker could exploit this by convincing a valid RHACS user to visit an attacker-controlled web page, that deceptively points to valid RHACS endpoints, hijacking the user's account permissions to perform other actions.

Rincian

Terbit di NVD

12 Desember 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1021: Improper Restriction of Rendered UI Layers or Frames

EPSS (30 hari)

0,63% peluang dieksploitasi; lebih tinggi dari 48,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/errata/RHSA-2023:5206 advisory vendor
• https://access.redhat.com/security/cve/CVE-2023-4958 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=1990363 issue tracking · patch