Description
A content spoofing flaw was found in OpenShift's OAuth endpoint. This flaw allows a remote, unauthenticated attacker to inject text into a webpage, enabling the obfuscation of a phishing operation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | openshift | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — |
Advisories 1
- WID-SEC-2022-2178 Red Hat OpenShift: Schwachstelle ermöglicht Darstellen falscher Informationen BSI CERT-Bund (WID) · Nov 27, 2022
References
- https://access.redhat.com/security/cve/CVE-2022-4145 vdb-entry
- RHBZ#2148667 issue-tracking