CVE-2016-3738

HIGH

Red Hat OpenShift Enterprise 3.2 - Privilege Escalation

Title source: llm

Description

Red Hat OpenShift Enterprise 3.2 does not properly restrict access to STI builds, which allows remote authenticated users to access the Docker socket and gain privileges via vectors related to build-pod.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2016:1094

Scores

CVSS v3 8.8

EPSS 0.0194

EPSS Percentile 77.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-264

Status published

Products (1)

redhat/openshift 3.2

Published Jun 08, 2016

Tracked Since Feb 18, 2026