| Package | Affected versions | Patched versions |
|---|---|---|
| openshift container platform | = 3.11= 4.1 |
A flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the cluster console component were found to remain static during a user's session. An attacker with the ability to observe the value of this token would be able to re-use the token to perform a CSRF attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free