CVEvulnerability
CVE-2016-3738
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-06-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Red Hat OpenShift Enterprise 3.2 does not properly restrict access to STI builds, which allows remote authenticated users to access the Docker socket and gain privileges via vectors related to build-pod.
Affected configurations
• redhat openshift 3.2
Related
Weakness · not in database (1)
References
- https://access.redhat.com/errata/RHSA-2016:1094 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2016:1094 Vendor Advisory