vulnerability

Red Hat OpenShift: CVE-2016-5392: Kubernetes: disclosure of information in multi tenant environments via watch-cache list

Name: Red Hat OpenShift: CVE-2016-5392: Kubernetes: disclosure of information in multi tenant environments via watch-cache list
Creator: Red Hat
Published: 2016-08-05T00:00:00.000Z
Keywords: CVE, CWE-200, Red Hat OpenShift, 2016, 5392, Kubernetes, linuxrpm-upgrade-atomic-openshift, Severity 7

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:S/C:C/I:N/A:N)

Published

Aug 5, 2016

Added

Jun 18, 2018

Modified

Mar 30, 2026

Description

The API server in Kubernetes, as used in Red Hat OpenShift Enterprise 3.2, in a multi tenant environment allows remote authenticated users with knowledge of other project names to obtain sensitive project and user information via vectors related to the watch-cache list.

Solution

linuxrpm-upgrade-atomic-openshift

References

CVE-2016-5392
https://attackerkb.com/topics/CVE-2016-5392
CWE-200
EUVD-EUVD-2016-6341
REDHAT-RHSA-2016:1427
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-6341

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report