NetSight
medium6.5

CVE-2019-14860

It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins.

Impact

It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins. An attacker could use this lack of protection to conduct phishing attacks and further access unauthorized information.

Affected products

VendorProductAffected versions
RedhatFuse
before 7.5.0
RedhatSyndesis
All versions

Weakness classification

References