{ "schema_version": "1.4.0", "id": "GHSA-7v88-g335-x4p8", "modified": "2022-05-17T05:17:50Z", "published": "2022-05-17T05:17:49Z", "aliases": [ "CVE-2012-5622" ], "details": "Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller.rb) in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5622" }, { "type": "WEB", "url": "https://github.com/openshift/origin-server/pull/1009" }, { "type": "WEB", "url": "https://github.com/openshift/origin-server/commit/1ad0d1d792395306b59a34ad7b6e7e89a35d041e" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2012:1555" }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2012-5622" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=883227" }, { "type": "WEB", "url": "http://osvdb.org/88333" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2012-1555.html" } ], "database_specific": { "cwe_ids": [ "CWE-352" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2012-12-18T01:55:00Z" } }