CVE-2016-2142

Published: Jun 8, 2016Modified: May 6, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master-config.yaml configuration file, which allows local users to obtain Active Directory credentials by reading the file.

Affected (1)

Products: Redhat: Openshift

Redhat

1 product

Openshift

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Openshift	Version 3.1

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://access.redhat.com/errata/RHSA-2016:1038

Source: secalert@redhat.com

Vendor Advisory

https://access.redhat.com/errata/RHSA-2016:1038

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.