Read the docs
TI-2016-01744 Aliases CVE-2016-1906GHSA-m3fm-h5jp-q79p

Openshift allows remote attackers to gain privileges by updating a build configuration…

Priority MEDIUM 50CWE-264Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 2 fixed, 1 without a fix

Attack profile from CVSS 3.0 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-264.

Summary

Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.

Why it matters now

EPSS 0.04843 92nd percentileScored 2026-11-07
Fix Partial github.com/openshift/origin (Go): 1.1.1Red Hat: 2 advisoriesRed Hat: 2 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—github.com/openshift/origin (Go)before 1.1.11.1.1Patch availableGHSA-m3fm-h5jp-q79p
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • github.com/openshift/origin (Go) Vendor— Affected before 1.1.1 Fixed in 1.1.1 Patch available GHSA-m3fm-h5jp-q79p

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:kubernetes:kubernetes:-:*:*:*:*:*:*:*not specified by NVDVulnerableKubernetes
  • cpe:2.3:a:kubernetes:kubernetes:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Kubernetes

Remediation

  • Fix · GHSA-m3fm-h5jp-q79p github.com/openshift/origin (Go) Fixed in 1.1.1 Advisory →

Red Hat 2 advisories

  • RHSA-2016:0351 Released 2016-03-03 · Red Hat rating Moderate
    kubernetes security update
    • Red Hat OpenShift Enterprise 3.0 openshift-3.0.2.0-0.git.45.423f434.el7ose, openshift-clients-3.0.2.0-0.git.45.423f434.el7ose, openshift-master-3.0.2.0-0.git.45.423f434.el7ose +3
  • RHSA-2016:0070 Released 2016-01-26 · Red Hat rating Important
    Red Hat OpenShift Enterprise 3.1.1 bug fix and enhancement update
    • Red Hat OpenShift Enterprise 3.1 atomic-openshift-3.1.1.6-1.git.0.b57e8bd.el7aos, atomic-openshift-clients-3.1.1.6-1.git.0.b57e8bd.el7aos, atomic-openshift-clients-redistributable-3.1.1.6-1.git.0.b57e8bd.el7aos +47

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Will not fix
Red Hat OpenShift Enterprise 3.0Fixed RHSA-2016:0351
Red Hat OpenShift Enterprise 3.1Fixed RHSA-2016:0070

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-1906
  2. 2026-10-03 Alias added: GHSA-m3fm-h5jp-q79p

References

Advisory 3

Other 6

  • TI-2018-16130 Improper privilege management in Kubernetes CVSS 3.0CRITICAL 9.8
  • TI-2019-08418 Kubernetes kubelet exposes /debug/pprof info on healthz port CVSS 3.1HIGH 8.2
  • TI-2023-05086 Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation CVSS 3.1HIGH 8.8
  • TI-2023-03433 Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation CVSS 3.1HIGH 8.8
  • TI-2023-02285 Bypass of seccomp profile enforcement CVSS 3.1MEDIUM 5.5
  • TI-2017-14755 Link following in Kubernetes CVSS 3.0CRITICAL 9.6
See all 55 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences