{"id":"CVE-2019-3876","aliases":["EUVD-2022-4366","GHSA-jgwg-35hf-xqrr","RHSA-2019:1851"],"status":"published","title":"Withdrawn Advisory: OpenShift OAuth Server XSS Vulnerability","description":"A flaw was found in the /oauth/token/request custom endpoint of the OpenShift OAuth server allowing for XSS generation of CLI tokens due to missing X-Frame-Options and CSRF protections. If not otherwise prevented, a separate XSS vulnerability via JavaScript could further allow for the extraction of these tokens.","severity":{"version":"3.0","score":5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00672,"percentile":0.52319,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2019-04-01T14:15:42Z","modified":"2026-09-10T03:49:34Z","affected":[{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.129-1.git.0.bd4f2d5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.129-1.git.0.bd4f2d5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.129-1.git.0.bd4f2d5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-docker-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.129-1.git.0.bd4f2d5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.129-1.git.0.bd4f2d5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.129-1.git.0.bd4f2d5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-hypershift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.129-1.git.0.bd4f2d5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-master","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.129-1.git.0.bd4f2d5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.129-1.git.0.bd4f2d5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-pod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.129-1.git.0.bd4f2d5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-sdn-ovs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.129-1.git.0.bd4f2d5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-template-service-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.129-1.git.0.bd4f2d5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.129-1.git.0.bd4f2d5.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.1560870549-1.el7"}]}],"bundled":3}],"products":[{"vendor":"red hat","product":"web-console"},{"vendor":"redhat","product":"openshift_container_platform"}],"references":[{"url":"http://www.securityfocus.com/bid/107664","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1851","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","web","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3876","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3876","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3876","tags":["web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691107","tags":["web","report"]},{"url":"https://web.archive.org/web/20210126211309/http://www.securityfocus.com/bid/107664","tags":["web"]},{"url":"https://github.com/advisories/GHSA-jgwg-35hf-xqrr"},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1683190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1719782","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1851.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3876","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10337","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10337","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10337","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1399","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-1002100","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1002100","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1002100","tags":["advisory"]},{"url":"https://groups.google.com/forum/#!topic/kubernetes-announce/vmUUNkYfG9g","tags":["article"]}],"sources":{"cve":[{"id":"CVE-2019-3876","description":"A flaw was found in the /oauth/token/request custom endpoint of the OpenShift OAuth server allowing for XSS generation of CLI tokens due to missing X-Frame-Options and CSRF protections. If not otherwise prevented, a separate XSS vulnerability via JavaScript could further allow for the extraction of these tokens.","status":"published","published":"2019-04-01T14:15:42Z","modified":"2024-08-04T19:19:18.679Z","cvss":[{"version":"3.0","score":5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:20:23.048861Z"}],"euvd":[{"id":"EUVD-2022-4366","description":"A flaw was found in the /oauth/token/request custom endpoint of the OpenShift OAuth server allowing for XSS generation of CLI tokens due to missing X-Frame-Options and CSRF protections. If not otherwise prevented, a separate XSS vulnerability via JavaScript could further allow for the extraction of these tokens.","status":"published","published":"2019-04-01T14:15:42Z","modified":"2024-08-04T19:19:18Z","cvss":[{"version":"3.0","score":5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T03:06:54.362786Z"}],"ghsa":[{"id":"GHSA-jgwg-35hf-xqrr","title":"Withdrawn Advisory: OpenShift OAuth Server XSS Vulnerability","description":"## Withdrawn Advisory\n\nThis advisory has been withdrawn because the vulnerability does not affect a package in one of the GitHub Advisory Database's [supported ecosystems](https://github.com/github/advisory-database/blob/main/README.md#supported-ecosystems). This link is maintained to preserve external references.\n\n## Original Description\n\nA flaw was found in the `/oauth/token/request` custom endpoint of the OpenShift OAuth server allowing for XSS generation of CLI tokens due to missing X-Frame-Options and CSRF protections. If not otherwise prevented, a separate XSS vulnerability via JavaScript could further allow for the extraction of these tokens.","status":"withdrawn","published":"2022-05-13T01:12:23Z","modified":"2023-09-28T20:29:32Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:37:06.913882Z"}],"nvd":[{"id":"CVE-2019-3876","description":"A flaw was found in the /oauth/token/request custom endpoint of the OpenShift OAuth server allowing for XSS generation of CLI tokens due to missing X-Frame-Options and CSRF protections. If not otherwise prevented, a separate XSS vulnerability via JavaScript could further allow for the extraction of these tokens.","status":"published","published":"2019-04-01T15:29:01.123Z","modified":"2026-06-17T02:35:47.157Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"primary"},{"version":"3.0","score":5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:05:09.523883Z"}],"osv":[{"id":"GHSA-jgwg-35hf-xqrr","title":"Withdrawn Advisory: OpenShift OAuth Server XSS Vulnerability","description":"## Withdrawn Advisory\n\nThis advisory has been withdrawn because the vulnerability does not affect a package in one of the GitHub Advisory Database's [supported ecosystems](https://github.com/github/advisory-database/blob/main/README.md#supported-ecosystems). This link is maintained to preserve external references.\n\n## Original Description\n\nA flaw was found in the `/oauth/token/request` custom endpoint of the OpenShift OAuth server allowing for XSS generation of CLI tokens due to missing X-Frame-Options and CSRF protections. If not otherwise prevented, a separate XSS vulnerability via JavaScript could further allow for the extraction of these tokens.","status":"withdrawn","published":"2022-05-13T01:12:23Z","modified":"2026-09-10T03:49:34.112636114Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T15:46:50.336262Z"},{"id":"RHSA-2019:1851","title":"Red Hat Security Advisory: OpenShift Container Platform 3.11 security update","status":"published","published":"2024-09-18T04:10:11Z","modified":"2026-06-27T10:07:37Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"}]}}