CVE-2016-1906

Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.

Score

CVSS 3.0 9.8 Critical

Status

Modified - secalert@redhat.com

Published

2016-02-03

Last modified

2024-08-05

Weaknesses

CWE-264

Affected products

• Kubernetes (Kubernetes)

References

• https://access.redhat.com/errata/RHSA-2016:0070
• https://access.redhat.com/errata/RHSA-2016:0351
• https://github.com/openshift/origin/issues/6556
• https://github.com/openshift/origin/pull/6576