https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T20:24:30.081220+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-03447 cnvd-2016-03447 2026-10-08T20:24:30.085637+00:00 cnvd-2016-03447 https://cve.radiocsirt.org/vuln/euvd-2026-83727 EUVD-2026-83727 2026-10-08T20:24:30.085671+00:00 EUVD-2026-83727 https://cve.radiocsirt.org/vuln/fkie_cve-2016-3703 fkie_cve-2016-3703 2026-10-08T20:24:30.085685+00:00

Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or pod/proxy API for a specific pod, which allows remote attackers to access API credentials in the web browser localStorage via an access_token in the query parameter.

 https://cve.radiocsirt.org/vuln/ghsa-xhrq-h87x-w62q GHSA-xhrq-h87x-w62q 2026-10-08T20:24:30.085720+00:00

Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or pod/proxy API for a specific pod, which allows remote attackers to access API credentials in the web browser localStorage via an access_token in the query parameter.

 https://cve.radiocsirt.org/vuln/gsd-2016-3703 gsd-2016-3703 2026-10-08T20:24:30.085737+00:00 gsd-2016-3703 https://cve.radiocsirt.org/vuln/rhsa-2016:1094 RHSA-2016:1094 — Red Hat Security Advisory: Red Hat OpenShift Enterprise 3.2 security update 2026-10-08T20:24:30.085748+00:00

3: Untrusted content loaded via the API proxy can access web console credentials on the same domain 3: s2i builds implicitly perform docker builds origin: pod update allows docker socket access via build-pod