CVE-2016-1906

Published: Feb 3, 2016Modified: May 6, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.

Affected (1)

Products: Kubernetes: Kubernetes

Kubernetes

1 product

Kubernetes

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Kubernetes Kubernetes	All versions

Related CWEs

CWE-264

References (8)

https://access.redhat.com/errata/RHSA-2016:0070

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2016:0351

Source: secalert@redhat.com

https://github.com/openshift/origin/issues/6556

Source: secalert@redhat.com

https://github.com/openshift/origin/pull/6576

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2016:0070

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2016:0351

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/openshift/origin/issues/6556

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/openshift/origin/pull/6576

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.