PT-2016-5029 · Red Hat · Red Hat Openshift Enterprise

Published 2016-06-08 · Updated 2023-02-13 · CVE-2016-2149

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat OpenShift Enterprise version 3.2

Description The issue allows remote authenticated users to read log files from another namespace. This can be achieved by creating a new namespace with the same name as a previously deleted namespace.

Recommendations For Red Hat OpenShift Enterprise version 3.2, update to a version that includes a fix for this issue to prevent unauthorized access to log files.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-2149

RHSA-2016:1064

Affected Products

Red Hat Openshift Enterprise

References · 3

• https://access.redhat.com/errata/RHSA-2016:1064 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-2149 · Security Note
• https://osv.dev/vulnerability/CVE-2016-2149 · Vendor Advisory