CVEvulnerability
CVE-2016-2160
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-06-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing the root password in an sti builder image.
Affected configurations
• redhat openshift origin
• redhat openshift 3.2
Related
Weakness · not in database (1)
References
- https://access.redhat.com/errata/RHSA-2016:1064 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1316127 bugzilla.redhat.com
- https://github.com/openshift/origin/pull/7864 Patch
- https://access.redhat.com/errata/RHSA-2016:1064 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1316127 bugzilla.redhat.com
- https://github.com/openshift/origin/pull/7864 Patch