CVE-2012-5647
Open redirect vulnerability in node-util/www/html/restorer.php in Red Hat OpenShift Origin before...
Open redirect vulnerability in node-util/www/html/restorer.php in Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the PATH_INFO.
Exploit likelihood
What each source reports
NVD Score used
5.8
Open redirect vulnerability in node-util/www/html/restorer.php in Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the PATH_INFO.
- Record
CVE-2012-5647- CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Open redirect vulnerability in node-util/www/html/restorer.php in Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the PATH_INFO.
- Record
CVE-2012-5647- Updated
- 2026-11-02
EUVDEUVD-2012-5531 No score
Open redirect vulnerability in node-util/www/html/restorer.php in Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the PATH_INFO.
- Record
EUVD-2012-5531- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v73g-25pc-vp6r No score
Open redirect vulnerability in node-util/www/html/restorer.php in Red Hat OpenShift Origin before...
Open redirect vulnerability in node-util/www/html/restorer.php in Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the PATH_INFO.
- Record
GHSA-v73g-25pc-vp6r- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openshift-origin-node-utilRed Hat:openshift:1::el6 From an advisory covering 2 CVEs |
before 0:1.0.5-3.el6op | 0:1.0.5-3.el6op |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-5647 is a medium vulnerability (CVSS 5.8) in Redhat Openshift, published February 24, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.46%, the 73rd percentile. No source names a fixed version.
References
github.com/openshift/origin-server/pull/1017
osvdb.org/89430
rhn.redhat.com/errata/RHSA-2013-0148.html
github.com/openshift/origin-server/commit/32564a0839b1517d762afab2013c26c0959bac00
bugzilla.redhat.com/show_bug.cgi?id=888523
securityfocus.com/bid/57189
Show 11 moreShow less
nvd.nist.gov/vuln/detail/CVE-2012-5647
github.com/advisories/GHSA-v73g-25pc-vp6r
access.redhat.com/errata/RHSA-2013:0148
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=888518
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0148.json
access.redhat.com/security/cve/CVE-2012-5646
cve.org/CVERecord?id=CVE-2012-5646
nvd.nist.gov/vuln/detail/CVE-2012-5646
access.redhat.com/security/cve/CVE-2012-5647
cve.org/CVERecord?id=CVE-2012-5647