描述
It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins. An attacker could use this lack of protection to conduct phishing attacks and further access unauthorized information.
AI分析AI驱动
受影响产品
redhatfuse
redhatsyndesis
-
参考资料
- https://access.redhat.com/errata/RHSA-2019:3892Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14860Issue TrackingVendor Advisory
- https://access.redhat.com/errata/RHSA-2019:3892Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14860Issue TrackingVendor Advisory