CVE-2016-3711: Infoleak
Published Jun 8, 2016
·Updated
HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address of a pod by reading the "OPENSHIFT[namespace]SERVERID" cookie.
Affected Software
2 affected components
redhat Openshift=3.2
redhat OpenShift Origin
Remediation
Patch Available
Event History
Jun 8, 2016
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-3711?
The CVE-2016-3711 vulnerability has a medium severity rating due to its potential to expose internal IP addresses.
2
How do I fix CVE-2016-3711?
To fix CVE-2016-3711, update to a patched version of OpenShift that addresses this vulnerability.
3
Which versions of OpenShift are affected by CVE-2016-3711?
CVE-2016-3711 affects Red Hat OpenShift Enterprise version 3.2 and OpenShift Origin without specific restriction on versions.
4
What kind of risk does CVE-2016-3711 pose to users?
CVE-2016-3711 allows local users to access sensitive information, potentially leading to further exploitation of the environment.
5
Is CVE-2016-3711 a local or remote vulnerability?
CVE-2016-3711 is a local vulnerability that requires access to the environment to exploit.