CVE-2016-2160: Critical severity red hat openshift origin vulnerability
It was reported that by creating a new image with root password changed and using it as a sti builder image, attackers are able to gain ROOT in it. Overridding builder image scripts(e.g. assemble) can help the attackers to access the pod and/or perform remote command execution in it.
Product bugs (contain reproducer):
https://bugzilla.redhat.com/showbug.cgi?id=1315187 https://bugzilla.redhat.com/showbug.cgi?id=1315188
Upstream bug:
https://github.com/openshift/origin/pull/7864
Other sources
Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing the root password in an sti builder image.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2160?
CVE-2016-2160 is considered a high-severity vulnerability due to its potential for remote command execution and elevated privileges.
How do I fix CVE-2016-2160?
To fix CVE-2016-2160, ensure that you upgrade Red Hat OpenShift to a patched version that addresses this vulnerability.
What are the potential impacts of CVE-2016-2160?
The potential impacts of CVE-2016-2160 include unauthorized access to the pod and the ability to execute arbitrary commands as root.
Which software is affected by CVE-2016-2160?
CVE-2016-2160 affects Red Hat OpenShift Origin and Red Hat OpenShift version 3.2.
Can CVE-2016-2160 be exploited remotely?
Yes, CVE-2016-2160 can be exploited remotely, allowing attackers to gain root access.