CVE-2016-3711

HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address of a pod by reading the "OPENSHIFT_[namespace]_SERVERID" cookie.

Score

CVSS 3.0 3.3 Low

Status

Modified - secalert@redhat.com

Published

2016-06-08

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Openshift (Redhat)
• Openshift Origin (Redhat)

References

• https://access.redhat.com/errata/RHSA-2016:1064
• https://github.com/openshift/origin/pull/8334