Vulnerability-Lookup

CNVD-2018-08871

Vulnerability from cnvd - Published: 2018-05-03

Title

Red Hat OpenShift Enterprise HTML注入漏洞

Description

Red Hat OpenShift是美国红帽（Red Hat）公司的一款平台即服务（PaaS）云计算平台，它可构建、测试、部署和运行应用程序。OpenShift Enterprise是一个开源的私有云版本。 Red Hat OpenShift Enterprise存在HTML注入漏洞。该漏洞产生的原因是缺乏对用户输入（特别是终端转义字符）的验证和查看pod日志文件时自动创建可点击的链接。攻击者可通过pod日志查看器利用该漏洞进行跨站脚本攻击。

Severity

中

Formal description

厂商尚未提供漏洞修复方案，请关注厂商主页更新： https://www.openshift.com/

Reference

https://nvd.nist.gov/vuln/detail/CVE-2017-7534

Impacted products

Name
Red Hat OpenShift Enterprise 3.0

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "103754"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-7534"
    }
  },
  "description": "Red Hat OpenShift\u662f\u7f8e\u56fd\u7ea2\u5e3d\uff08Red Hat\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u5e73\u53f0\u5373\u670d\u52a1\uff08PaaS\uff09\u4e91\u8ba1\u7b97\u5e73\u53f0\uff0c\u5b83\u53ef\u6784\u5efa\u3001\u6d4b\u8bd5\u3001\u90e8\u7f72\u548c\u8fd0\u884c\u5e94\u7528\u7a0b\u5e8f\u3002OpenShift Enterprise\u662f\u4e00\u4e2a\u5f00\u6e90\u7684\u79c1\u6709\u4e91\u7248\u672c\u3002 \r\n\r\nRed Hat OpenShift Enterprise\u5b58\u5728HTML\u6ce8\u5165\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u4ea7\u751f\u7684\u539f\u56e0\u662f\u7f3a\u4e4f\u5bf9\u7528\u6237\u8f93\u5165\uff08\u7279\u522b\u662f\u7ec8\u7aef\u8f6c\u4e49\u5b57\u7b26\uff09\u7684\u9a8c\u8bc1\u548c\u67e5\u770bpod\u65e5\u5fd7\u6587\u4ef6\u65f6\u81ea\u52a8\u521b\u5efa\u53ef\u70b9\u51fb\u7684\u94fe\u63a5\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7pod\u65e5\u5fd7\u67e5\u770b\u5668\u5229\u7528\u8be5\u6f0f\u6d1e\u8fdb\u884c\u8de8\u7ad9\u811a\u672c\u653b\u51fb\u3002",
  "discovererName": "Jeandre Le Roux (LSD Information Technology)",
  "formalWay": "\u5382\u5546\u5c1a\u672a\u63d0\u4f9b\u6f0f\u6d1e\u4fee\u590d\u65b9\u6848\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u66f4\u65b0\uff1a\r\nhttps://www.openshift.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-08871",
  "openTime": "2018-05-03",
  "products": {
    "product": "Red Hat OpenShift Enterprise 3.0"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2017-7534",
  "serverity": "\u4e2d",
  "submitTime": "2018-04-12",
  "title": "Red Hat OpenShift Enterprise HTML\u6ce8\u5165\u6f0f\u6d1e"
}

CVE-2017-7534 (GCVE-0-2017-7534)

Vulnerability from cvelistv5 – Published: 2018-04-11 19:00 – Updated: 2024-08-05 16:04

Summary

OpenShift Enterprise version 3.x is vulnerable to a stored XSS via the log viewer for pods. The flaw is due to lack of sanitation of user input, specifically terminal escape characters, and the creation of clickable links automatically when viewing the log files for a pod.

Severity

No CVSS data available.

CWE

CWE-79

Assigner

redhat redhat root

References

2 references

URL	Tags
http://www.securityfocus.com/bid/103754	vdb-entryx_refsource_BID
https://bugzilla.redhat.com/show_bug.cgi?id=1443003	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Red Hat, Inc.	Openshift	Affected: 3.x

Date Public

2018-04-10 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:04:11.828Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "103754",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103754"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443003"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Openshift",
          "vendor": "Red Hat, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "3.x"
            }
          ]
        }
      ],
      "datePublic": "2018-04-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "OpenShift Enterprise version 3.x is vulnerable to a stored XSS via the log viewer for pods. The flaw is due to lack of sanitation of user input, specifically terminal escape characters, and the creation of clickable links automatically when viewing the log files for a pod."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-04-17T09:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "103754",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/103754"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443003"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-7534",
    "datePublished": "2018-04-11T19:00:00.000Z",
    "dateReserved": "2017-04-05T00:00:00.000Z",
    "dateUpdated": "2024-08-05T16:04:11.828Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2018-08871

CVE-2017-7534 (GCVE-0-2017-7534)

Tags

Sightings

Nomenclature

Related by attack behaviour