PT-2016-5671 · Red Hat+1 · Openshift Origin+2

Published 2016-06-08 · Updated 2023-02-12 · CVE-2016-3711

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions HAproxy in Red Hat OpenShift Enterprise version 3.2 HAproxy in OpenShift Origin version 3.2

Description The issue allows local users to obtain the internal IP address of a pod by reading the OPENSHIFT [namespace] SERVERID cookie.

Recommendations For HAproxy in Red Hat OpenShift Enterprise version 3.2, restrict access to the OPENSHIFT [namespace] SERVERID cookie to minimize the risk of exploitation. For HAproxy in OpenShift Origin version 3.2, consider implementing additional security measures to protect the OPENSHIFT [namespace] SERVERID cookie from unauthorized access.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-3711

RHSA-2016:1064

Affected Products

Haproxy

Openshift Origin

Red Hat Openshift Enterprise

References · 4

• https://github.com/openshift/origin/pull/8334 · Patch
• https://osv.dev/vulnerability/CVE-2016-3711 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2016:1064 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-3711 · Security Note