https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 20:24:29 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-03447 cnvd-2016-03447 https://cve.radiocsirt.org/vuln/cnvd-2016-03447 https://cve.radiocsirt.org/vuln/euvd-2026-83727 EUVD-2026-83727 https://cve.radiocsirt.org/vuln/euvd-2026-83727 https://cve.radiocsirt.org/vuln/fkie_cve-2016-3703 <p>Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or pod/proxy API for a specific pod, which allows remote attackers to access API credentials in the web browser localStorage via an access_token in the query parameter.</p> <p>Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or pod/proxy API for a specific pod, which allows remote attackers to access API credentials in the web browser localStorage via an access_token in the query parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-3703 https://cve.radiocsirt.org/vuln/ghsa-xhrq-h87x-w62q <p>Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or pod/proxy API for a specific pod, which allows remote attackers to access API credentials in the web browser localStorage via an access_token in the query parameter.</p> <p>Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or pod/proxy API for a specific pod, which allows remote attackers to access API credentials in the web browser localStorage via an access_token in the query parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-xhrq-h87x-w62q https://cve.radiocsirt.org/vuln/gsd-2016-3703 gsd-2016-3703 https://cve.radiocsirt.org/vuln/gsd-2016-3703 https://cve.radiocsirt.org/vuln/rhsa-2016:1094 <p>3: Untrusted content loaded via the API proxy can access web console credentials on the same domain 3: s2i builds implicitly perform docker builds origin: pod update allows docker socket access via build-pod</p> <p>3: Untrusted content loaded via the API proxy can access web console credentials on the same domain 3: s2i builds implicitly perform docker builds origin: pod update allows docker socket access via build-pod</p> https://cve.radiocsirt.org/vuln/rhsa-2016:1094