CVE-2016-1906
CriticalSummary
Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.
Risk Assessment
Attackers can exploit this vulnerability to escalate privileges, potentially leading to unauthorized access to system resources.
Recommendation
It is recommended to monitor and restrict the ability to update build configurations to allowed types and implement additional access controls.
Other vulnerabilities in Openshift
See all- CVE-2026-1784High
The Route resource in OpenShift allows defining routes to expose pods via HAProxy. Insufficient validation of the spec.path field in a Route document could allow controlled injection of HAProxy configuration.
- CVE-2024-45497High
A flaw in the OpenShift build process mounts the host's /var/lib/kubelet/config.json file into the docker-build container with write access. This allows an attacker to overwrite the file containing sensitive credentials for pulling images from private repositories.
Original NVD description (English source)
Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.