CVE-2020-1761

Name of the Vulnerable Software and Affected Versions: openshift/console versions before openshift/console-4

Description: A flaw was found in the OpenShift web console, where the access token is stored in the browser's local storage. An attacker can use this flaw to get the access token via physical access, or an XSS attack on the victim's browser.

Recommendations: For openshift/console versions before openshift/console-4, update to openshift/console-4 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive resources that use the access token stored in the browser's local storage.