CVE-2016-8631

The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes. An attacker with access to create routes can potentially overwrite existing routes and redirect network traffic for other users to their own site.

Score

CVSS 3.0 7.7 High

Status

Modified - secalert@redhat.com

Published

2018-07-31

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Openshift Enterprise (Red Hat)
• Openshift (Redhat)

References

• http://www.securityfocus.com/bid/94110
• https://access.redhat.com/errata/RHSA-2016:2696
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8631