vulnerability
Red Hat OpenShift: CVE-2016-3738: origin: pod update allows docker socket access via build-pod
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:L/Au:S/C:P/I:P/A:P) | Jun 8, 2016 | Jun 18, 2018 | Apr 14, 2025 |
Severity
7
CVSS
(AV:N/AC:L/Au:S/C:P/I:P/A:P)
Published
Jun 8, 2016
Added
Jun 18, 2018
Modified
Apr 14, 2025
Description
Red Hat OpenShift Enterprise 3.2 does not properly restrict access to STI builds, which allows remote authenticated users to access the Docker socket and gain privileges via vectors related to build-pod.
Solution
linuxrpm-upgrade-atomic-openshift
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.