CVE-2023-4958

Name of the Vulnerable Software and Affected Versions Red Hat Advanced Cluster Security (RHACS) (affected versions not specified)

Description The issue is related to missing security-related HTTP headers in Red Hat Advanced Cluster Security (RHACS), which could allow an attacker to perform a clickjacking attack. An attacker could exploit this by convincing a valid RHACS user to visit an attacker-controlled web page that deceptively points to valid RHACS endpoints, potentially hijacking the user's account permissions to perform other actions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.