Authorization bypass in Openshift

KRITISCH 9.8CVE-2016-1906 · GHSA-m3fm-h5jp-q79p · GO-2022-0854 · Published 03/02/2016 · updated 17/06/2026

Kurz gesagt

CVE-2016-1906 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in github.com/openshift/origin.
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 4.8%, höher als bei 92.0% aller Schwachstellen.
Abhilfe: auf 1.1.1 oder neuer aktualisieren.

Package	Affected versions	Patched versions
github.com/openshift/origin Go	`< 1.1.1`	`1.1.1`

Description

Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.

NVD description

Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.

References

nvd.nist.gov/vuln/detail/CVE-2016-1906 · ADVISORY
openshift/origin · WEB
openshift/origin#6576 · WEB
openshift/origin commit d95ec08 · WEB
access.redhat.com/errata/RHSA-2016:0070 · WEB
access.redhat.com/errata/RHSA-2016:0351 · WEB
access.redhat.com/security/cve/CVE-2016-1906 · WEB
bugzilla.redhat.com/show_bug.cgi · WEB
web.nvd.nist.gov/view/vuln/detail · WEB
GitHub Advisory GHSA-m3fm-h5jp-q79p · ADVISORY

Weitere Schwachstellen in github.com/openshift/origin

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

github.com/openshift/origin

< 1.1.1

1.1.1

Description

Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.

NVD description

Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.