Red Hat Security Advisory

RHSA-2016:1095

Red Hat OpenShift Enterprise 3.1 security update

Released 2016-05-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Enterprise 3.1 atomic-openshift-3.1.1.6-8.git.64.80b61da.el7aos, atomic-openshift-clients-3.1.1.6-8.git.64.80b61da.el7aos, atomic-openshift-clients-redistributable-3.1.1.6-8.git.64.80b61da.el7aos +7

Fixes 1 record

TI-2016-03133 CVE-2016-3703 · GHSA-xhrq-h87x-w62q

Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request…

LOW 26

Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or pod/proxy API for a specific pod, which allows remote attackers to access A…

CVSS 3.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0118 Published 2016-06-08 Fixed CWE-284