vulnerability

Red Hat OpenShift: CVE-2016-3738: origin: pod update allows docker socket access via build-pod

Severity
7
CVSS
(AV:N/AC:L/Au:S/C:P/I:P/A:P)
Published
Jun 8, 2016
Added
Jun 18, 2018
Modified
Apr 14, 2025

Description


Red Hat OpenShift Enterprise 3.2 does not properly restrict access to STI builds, which allows remote authenticated users to access the Docker socket and gain privileges via vectors related to build-pod.

Solution

linuxrpm-upgrade-atomic-openshift
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.