CVE-2013-0196

6.5 mediumEPSS 0.4%

A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2019-12-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

redhat:openshift

References

https://access.redhat.com/security/cve/cve-2013-0196
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0196
https://access.redhat.com/security/cve/cve-2013-0196
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0196

Check your stack JSON