CVE-2016-1906 Authorization bypass in Openshift
CriticalCVSS 9.8
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openshift github.com/openshift/origin(Go) | < 1.1.1 | 1.1.1 |
| Kubernetes | All versions | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com issue-tracking
- github.com patch
- github.com patch
- RHSA-2016:0070 vendor-advisory
- RHSA-2016:0351 vendor-advisory
- web.nvd.nist.gov
- access.redhat.com
- bugzilla.redhat.com
- github.com vendor-advisory
- Debian Security Tracker CVE-2016-1906 vendor-advisory