CVE-2020-1761

6.1 mediumEPSS 0.6%

Medium (6.1) in redhat openshift. EPSS 0.6% chance of exploitation in the next 30 days.

A flaw was found in the OpenShift web console, where the access token is stored in the browser's local storage. An attacker can use this flaw to get the access token via physical access, or an XSS attack on the victim's browser. This flaw affects openshift/console versions before openshift/console-4.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-358
Published: 2021-05-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:openshift

References

https://bugzilla.redhat.com/show_bug.cgi?id=1813788
https://bugzilla.redhat.com/show_bug.cgi?id=1813788

Check your stack JSON