CVE-2016-3738
Fixed in a distro release EPSS 2%
Red Hat OpenShift Enterprise 3.2 does not properly restrict access to STI builds, which allows remote authenticated users to access the Docker socket and gain privileges via vectors related to build-pod.
Products: redhat openshift
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openshift 3.2 | atomic-openshift | 0:3.2.0.44-1.git.0.a4463d9.el7 |
| Red Hat openshift 3.2 | atomic-openshift-clients | 0:3.2.0.44-1.git.0.a4463d9.el7 |
| Red Hat openshift 3.2 | atomic-openshift-clients-redistributable | 0:3.2.0.44-1.git.0.a4463d9.el7 |
| Red Hat openshift 3.2 | atomic-openshift-dockerregistry | 0:3.2.0.44-1.git.0.a4463d9.el7 |
| Red Hat openshift 3.2 | atomic-openshift-master | 0:3.2.0.44-1.git.0.a4463d9.el7 |
| Red Hat openshift 3.2 | atomic-openshift-node | 0:3.2.0.44-1.git.0.a4463d9.el7 |
| Red Hat openshift 3.2 | atomic-openshift-pod | 0:3.2.0.44-1.git.0.a4463d9.el7 |
| Red Hat openshift 3.2 | atomic-openshift-recycle | 0:3.2.0.44-1.git.0.a4463d9.el7 |
| Red Hat openshift 3.2 | atomic-openshift-sdn-ovs | 0:3.2.0.44-1.git.0.a4463d9.el7 |
| Red Hat openshift 3.2 | atomic-openshift-tests | 0:3.2.0.44-1.git.0.a4463d9.el7 |
| Red Hat openshift 3.2 | nodejs-node-uuid | 0:1.4.7-1.el7 |
| Red Hat openshift 3.2 | tuned-profiles-atomic-openshift-node | 0:3.2.0.44-1.git.0.a4463d9.el7 |