CVE-2016-1906
Authorization bypass in Openshift
CVE-2016-1906 is a critical vulnerability (CVSS 9.8) in Kubernetes, published February 3, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.84%, the 92nd percentile. Fixed in github.com/openshift/origin 1.1.1.
Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
9.8
Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.
- Record
CVE-2016-1906- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.
- Record
CVE-2016-1906- Updated
- 2026-11-02
EUVDEUVD-2021-2548 No score
Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.
- Record
EUVD-2021-2548- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m3fm-h5jp-q79p
9.8
Authorization bypass in Openshift
Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.
- Record
GHSA-m3fm-h5jp-q79p- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-285
- Updated
- 2026-11-02
OSVGHSA-m3fm-h5jp-q79p
9.8
Authorization bypass in Openshift
Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.
- Record
GHSA-m3fm-h5jp-q79p- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-285
- Updated
- 2026-11-02
OSVGO-2022-0854 No score
Authorization bypass in Openshift in github.com/openshift/origin
Authorization bypass in Openshift in github.com/openshift/origin
- Record
GO-2022-0854- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
github.com/openshift/originGo |
before 1.1.1 | 1.1.1 |
atomic-openshiftRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
atomic-openshift-clientsRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
atomic-openshift-clients-redistributableRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
atomic-openshift-dockerregistryRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
atomic-openshift-masterRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
atomic-openshift-nodeRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
atomic-openshift-podRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
atomic-openshift-recycleRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
atomic-openshift-sdn-ovsRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
Show 134 moreShow less
| Package | Affected | Fixed |
|---|---|---|
atomic-openshift-utilsRed Hat:openshift:3.1::el7 |
before 0:3.0.35-1.git.0.6a386dd.el7aos | 0:3.0.35-1.git.0.6a386dd.el7aos |
heapsterRed Hat:openshift:3.1::el7 |
before 0:0.18.2-3.gitaf4752e.el7aos | 0:0.18.2-3.gitaf4752e.el7aos |
jenkinsRed Hat:openshift:3.1::el7 |
before 0:1.625.3-2.el7aos | 0:1.625.3-2.el7aos |
nodejs-align-textRed Hat:openshift:3.1::el7 |
before 0:0.1.3-2.el7aos | 0:0.1.3-2.el7aos |
nodejs-ansi-greenRed Hat:openshift:3.1::el7 |
before 0:0.1.1-1.el7aos | 0:0.1.1-1.el7aos |
nodejs-ansi-wrapRed Hat:openshift:3.1::el7 |
before 0:0.1.0-1.el7aos | 0:0.1.0-1.el7aos |
nodejs-anymatchRed Hat:openshift:3.1::el7 |
before 0:1.3.0-1.el7aos | 0:1.3.0-1.el7aos |
nodejs-arr-diffRed Hat:openshift:3.1::el7 |
before 0:2.0.0-1.el7aos | 0:2.0.0-1.el7aos |
nodejs-arr-flattenRed Hat:openshift:3.1::el7 |
before 0:1.0.1-1.el7aos | 0:1.0.1-1.el7aos |
nodejs-array-uniqueRed Hat:openshift:3.1::el7 |
before 0:0.2.1-1.el7aos | 0:0.2.1-1.el7aos |
nodejs-arrifyRed Hat:openshift:3.1::el7 |
before 0:1.0.0-1.el7aos | 0:1.0.0-1.el7aos |
nodejs-async-eachRed Hat:openshift:3.1::el7 |
before 0:1.0.0-1.el7aos | 0:1.0.0-1.el7aos |
nodejs-binary-extensionsRed Hat:openshift:3.1::el7 |
before 0:1.3.1-1.el7aos | 0:1.3.1-1.el7aos |
nodejs-bracesRed Hat:openshift:3.1::el7 |
before 0:1.8.2-2.el7aos | 0:1.8.2-2.el7aos |
nodejs-capture-stack-traceRed Hat:openshift:3.1::el7 |
before 0:1.0.0-2.el7aos | 0:1.0.0-2.el7aos |
nodejs-chokidarRed Hat:openshift:3.1::el7 |
before 0:1.4.1-2.el7aos | 0:1.4.1-2.el7aos |
nodejs-configstoreRed Hat:openshift:3.1::el7 |
before 0:1.4.0-1.el7aos | 0:1.4.0-1.el7aos |
nodejs-create-error-classRed Hat:openshift:3.1::el7 |
before 0:2.0.1-2.el7aos | 0:2.0.1-2.el7aos |
nodejs-deep-extendRed Hat:openshift:3.1::el7 |
before 0:0.3.2-2.el7aos | 0:0.3.2-2.el7aos |
nodejs-duplexerRed Hat:openshift:3.1::el7 |
before 0:0.1.1-2.el7aos | 0:0.1.1-2.el7aos |
nodejs-duplexifyRed Hat:openshift:3.1::el7 |
before 0:3.4.2-1.el7aos | 0:3.4.2-1.el7aos |
nodejs-end-of-streamRed Hat:openshift:3.1::el7 |
before 0:1.1.0-2.el7aos | 0:1.1.0-2.el7aos |
nodejs-error-exRed Hat:openshift:3.1::el7 |
before 0:1.2.0-1.el7aos | 0:1.2.0-1.el7aos |
nodejs-es6-promiseRed Hat:openshift:3.1::el7 |
before 0:3.0.2-2.el7aos | 0:3.0.2-2.el7aos |
nodejs-event-streamRed Hat:openshift:3.1::el7 |
before 0:3.3.2-1.el7aos | 0:3.3.2-1.el7aos |
nodejs-expand-bracketsRed Hat:openshift:3.1::el7 |
before 0:0.1.4-1.el7aos | 0:0.1.4-1.el7aos |
nodejs-expand-rangeRed Hat:openshift:3.1::el7 |
before 0:1.8.1-1.el7aos | 0:1.8.1-1.el7aos |
nodejs-extglobRed Hat:openshift:3.1::el7 |
before 0:0.3.1-1.el7aos | 0:0.3.1-1.el7aos |
nodejs-filename-regexRed Hat:openshift:3.1::el7 |
before 0:2.0.0-1.el7aos | 0:2.0.0-1.el7aos |
nodejs-fill-rangeRed Hat:openshift:3.1::el7 |
before 0:2.2.3-1.el7aos | 0:2.2.3-1.el7aos |
nodejs-for-inRed Hat:openshift:3.1::el7 |
before 0:0.1.4-1.el7aos | 0:0.1.4-1.el7aos |
nodejs-for-ownRed Hat:openshift:3.1::el7 |
before 0:0.1.3-1.el7aos | 0:0.1.3-1.el7aos |
nodejs-fromRed Hat:openshift:3.1::el7 |
before 0:0.1.3-2.el7aos | 0:0.1.3-2.el7aos |
nodejs-glob-baseRed Hat:openshift:3.1::el7 |
before 0:0.3.0-1.el7aos | 0:0.3.0-1.el7aos |
nodejs-glob-parentRed Hat:openshift:3.1::el7 |
before 0:2.0.0-1.el7aos | 0:2.0.0-1.el7aos |
nodejs-gotRed Hat:openshift:3.1::el7 |
before 0:5.2.1-1.el7aos | 0:5.2.1-1.el7aos |
nodejs-graceful-fsRed Hat:openshift:3.1::el7 |
before 0:4.1.2-1.el7aos | 0:4.1.2-1.el7aos |
nodejs-iniRed Hat:openshift:3.1::el7 |
before 0:1.1.0-6.el7aos | 0:1.1.0-6.el7aos |
nodejs-is-binary-pathRed Hat:openshift:3.1::el7 |
before 0:1.0.1-1.el7aos | 0:1.0.1-1.el7aos |
nodejs-is-dotfileRed Hat:openshift:3.1::el7 |
before 0:1.0.2-1.el7aos | 0:1.0.2-1.el7aos |
nodejs-is-equal-shallowRed Hat:openshift:3.1::el7 |
before 0:0.1.3-1.el7aos | 0:0.1.3-1.el7aos |
nodejs-is-extendableRed Hat:openshift:3.1::el7 |
before 0:0.1.1-1.el7aos | 0:0.1.1-1.el7aos |
nodejs-is-extglobRed Hat:openshift:3.1::el7 |
before 0:1.0.0-1.el7aos | 0:1.0.0-1.el7aos |
nodejs-is-globRed Hat:openshift:3.1::el7 |
before 0:2.0.1-1.el7aos | 0:2.0.1-1.el7aos |
nodejs-is-npmRed Hat:openshift:3.1::el7 |
before 0:1.0.0-1.el7aos | 0:1.0.0-1.el7aos |
nodejs-is-numberRed Hat:openshift:3.1::el7 |
before 0:2.1.0-1.el7aos | 0:2.1.0-1.el7aos |
nodejs-is-plain-objRed Hat:openshift:3.1::el7 |
before 0:1.0.0-1.el7aos | 0:1.0.0-1.el7aos |
nodejs-is-primitiveRed Hat:openshift:3.1::el7 |
before 0:2.0.0-1.el7aos | 0:2.0.0-1.el7aos |
nodejs-is-redirectRed Hat:openshift:3.1::el7 |
before 0:1.0.0-1.el7aos | 0:1.0.0-1.el7aos |
nodejs-is-streamRed Hat:openshift:3.1::el7 |
before 0:1.0.1-2.el7aos | 0:1.0.1-2.el7aos |
nodejs-isobjectRed Hat:openshift:3.1::el7 |
before 0:2.0.0-1.el7aos | 0:2.0.0-1.el7aos |
nodejs-kind-ofRed Hat:openshift:3.1::el7 |
before 0:3.0.2-1.el7aos | 0:3.0.2-1.el7aos |
nodejs-latest-versionRed Hat:openshift:3.1::el7 |
before 0:2.0.0-1.el7aos | 0:2.0.0-1.el7aos |
nodejs-lazy-cacheRed Hat:openshift:3.1::el7 |
before 0:1.0.2-1.el7aos | 0:1.0.2-1.el7aos |
nodejs-lodash.assignRed Hat:openshift:3.1::el7 |
before 0:3.2.0-1.el7aos | 0:3.2.0-1.el7aos |
nodejs-lodash.baseassignRed Hat:openshift:3.1::el7 |
before 0:3.2.0-1.el7aos | 0:3.2.0-1.el7aos |
nodejs-lodash.basecopyRed Hat:openshift:3.1::el7 |
before 0:3.0.1-1.el7aos | 0:3.0.1-1.el7aos |
nodejs-lodash.bindcallbackRed Hat:openshift:3.1::el7 |
before 0:3.0.1-1.el7aos | 0:3.0.1-1.el7aos |
nodejs-lodash.createassignerRed Hat:openshift:3.1::el7 |
before 0:3.1.1-1.el7aos | 0:3.1.1-1.el7aos |
nodejs-lodash.defaultsRed Hat:openshift:3.1::el7 |
before 0:3.1.2-1.el7aos | 0:3.1.2-1.el7aos |
nodejs-lodash.getnativeRed Hat:openshift:3.1::el7 |
before 0:3.9.1-1.el7aos | 0:3.9.1-1.el7aos |
nodejs-lodash.isargumentsRed Hat:openshift:3.1::el7 |
before 0:3.0.4-1.el7aos | 0:3.0.4-1.el7aos |
nodejs-lodash.isarrayRed Hat:openshift:3.1::el7 |
before 0:3.0.4-1.el7aos | 0:3.0.4-1.el7aos |
nodejs-lodash.isiterateecallRed Hat:openshift:3.1::el7 |
before 0:3.0.9-1.el7aos | 0:3.0.9-1.el7aos |
nodejs-lodash.keysRed Hat:openshift:3.1::el7 |
before 0:3.1.2-1.el7aos | 0:3.1.2-1.el7aos |
nodejs-lodash.restparamRed Hat:openshift:3.1::el7 |
before 0:3.6.1-1.el7aos | 0:3.6.1-1.el7aos |
nodejs-lowercase-keysRed Hat:openshift:3.1::el7 |
before 0:1.0.0-2.el7aos | 0:1.0.0-2.el7aos |
nodejs-map-streamRed Hat:openshift:3.1::el7 |
before 0:0.1.0-2.el7aos | 0:0.1.0-2.el7aos |
nodejs-micromatchRed Hat:openshift:3.1::el7 |
before 0:2.3.5-2.el7aos | 0:2.3.5-2.el7aos |
nodejs-mkdirpRed Hat:openshift:3.1::el7 |
before 0:0.5.0-2.el7aos | 0:0.5.0-2.el7aos |
nodejs-node-status-codesRed Hat:openshift:3.1::el7 |
before 0:1.0.0-1.el7aos | 0:1.0.0-1.el7aos |
nodejs-nodemonRed Hat:openshift:3.1::el7 |
before 0:1.8.1-2.el7aos | 0:1.8.1-2.el7aos |
nodejs-normalize-pathRed Hat:openshift:3.1::el7 |
before 0:2.0.1-1.el7aos | 0:2.0.1-1.el7aos |
nodejs-object-assignRed Hat:openshift:3.1::el7 |
before 0:4.0.1-1.el7aos | 0:4.0.1-1.el7aos |
nodejs-object.omitRed Hat:openshift:3.1::el7 |
before 0:2.0.0-1.el7aos | 0:2.0.0-1.el7aos |
nodejs-optimistRed Hat:openshift:3.1::el7 |
before 0:0.4.0-5.el7aos | 0:0.4.0-5.el7aos |
nodejs-os-homedirRed Hat:openshift:3.1::el7 |
before 0:1.0.1-1.el7aos | 0:1.0.1-1.el7aos |
nodejs-os-tmpdirRed Hat:openshift:3.1::el7 |
before 0:1.0.1-1.el7aos | 0:1.0.1-1.el7aos |
nodejs-osenvRed Hat:openshift:3.1::el7 |
before 0:0.1.0-2.el7aos | 0:0.1.0-2.el7aos |
nodejs-package-jsonRed Hat:openshift:3.1::el7 |
before 0:2.3.0-1.el7aos | 0:2.3.0-1.el7aos |
nodejs-parse-globRed Hat:openshift:3.1::el7 |
before 0:3.0.4-1.el7aos | 0:3.0.4-1.el7aos |
nodejs-parse-jsonRed Hat:openshift:3.1::el7 |
before 0:2.2.0-2.el7aos | 0:2.2.0-2.el7aos |
nodejs-pause-streamRed Hat:openshift:3.1::el7 |
before 0:0.0.11-2.el7aos | 0:0.0.11-2.el7aos |
nodejs-pinkieRed Hat:openshift:3.1::el7 |
before 0:2.0.1-1.el7aos | 0:2.0.1-1.el7aos |
nodejs-pinkie-promiseRed Hat:openshift:3.1::el7 |
before 0:2.0.0-1.el7aos | 0:2.0.0-1.el7aos |
nodejs-prepend-httpRed Hat:openshift:3.1::el7 |
before 0:1.0.1-2.el7aos | 0:1.0.1-2.el7aos |
nodejs-preserveRed Hat:openshift:3.1::el7 |
before 0:0.2.0-1.el7aos | 0:0.2.0-1.el7aos |
nodejs-ps-treeRed Hat:openshift:3.1::el7 |
before 0:1.0.1-1.el7aos | 0:1.0.1-1.el7aos |
nodejs-randomaticRed Hat:openshift:3.1::el7 |
before 0:1.1.5-1.el7aos | 0:1.1.5-1.el7aos |
nodejs-rcRed Hat:openshift:3.1::el7 |
before 0:1.1.2-1.el7aos | 0:1.1.2-1.el7aos |
nodejs-read-all-streamRed Hat:openshift:3.1::el7 |
before 0:3.0.1-3.el7aos | 0:3.0.1-3.el7aos |
nodejs-readdirpRed Hat:openshift:3.1::el7 |
before 0:2.0.0-2.el7aos | 0:2.0.0-2.el7aos |
nodejs-regex-cacheRed Hat:openshift:3.1::el7 |
before 0:0.4.2-1.el7aos | 0:0.4.2-1.el7aos |
nodejs-registry-urlRed Hat:openshift:3.1::el7 |
before 0:3.0.3-1.el7aos | 0:3.0.3-1.el7aos |
nodejs-repeat-elementRed Hat:openshift:3.1::el7 |
before 0:1.1.2-1.el7aos | 0:1.1.2-1.el7aos |
nodejs-semverRed Hat:openshift:3.1::el7 |
before 0:5.1.0-1.el7aos | 0:5.1.0-1.el7aos |
nodejs-semver-diffRed Hat:openshift:3.1::el7 |
before 0:2.1.0-1.el7aos | 0:2.1.0-1.el7aos |
nodejs-slideRed Hat:openshift:3.1::el7 |
before 0:1.1.5-3.el7aos | 0:1.1.5-3.el7aos |
nodejs-splitRed Hat:openshift:3.1::el7 |
before 0:0.3.3-2.el7aos | 0:0.3.3-2.el7aos |
nodejs-stream-combinerRed Hat:openshift:3.1::el7 |
before 0:0.2.1-2.el7aos | 0:0.2.1-2.el7aos |
nodejs-string-lengthRed Hat:openshift:3.1::el7 |
before 0:1.0.1-1.el7aos | 0:1.0.1-1.el7aos |
nodejs-strip-json-commentsRed Hat:openshift:3.1::el7 |
before 0:1.0.2-2.el7aos | 0:1.0.2-2.el7aos |
nodejs-success-symbolRed Hat:openshift:3.1::el7 |
before 0:0.1.0-1.el7aos | 0:0.1.0-1.el7aos |
nodejs-throughRed Hat:openshift:3.1::el7 |
before 0:2.3.4-4.el7aos | 0:2.3.4-4.el7aos |
nodejs-timed-outRed Hat:openshift:3.1::el7 |
before 0:2.0.0-3.el7aos | 0:2.0.0-3.el7aos |
nodejs-touchRed Hat:openshift:3.1::el7 |
before 0:1.0.0-2.el7aos | 0:1.0.0-2.el7aos |
nodejs-undefsafeRed Hat:openshift:3.1::el7 |
before 0:0.0.3-1.el7aos | 0:0.0.3-1.el7aos |
nodejs-unzip-responseRed Hat:openshift:3.1::el7 |
before 0:1.0.0-1.el7aos | 0:1.0.0-1.el7aos |
nodejs-update-notifierRed Hat:openshift:3.1::el7 |
before 0:0.6.0-1.el7aos | 0:0.6.0-1.el7aos |
nodejs-url-parse-laxRed Hat:openshift:3.1::el7 |
before 0:1.0.0-1.el7aos | 0:1.0.0-1.el7aos |
nodejs-uuidRed Hat:openshift:3.1::el7 |
before 0:2.0.1-1.el7aos | 0:2.0.1-1.el7aos |
nodejs-write-file-atomicRed Hat:openshift:3.1::el7 |
before 0:1.1.2-2.el7aos | 0:1.1.2-2.el7aos |
nodejs-xdg-basedirRed Hat:openshift:3.1::el7 |
before 0:2.0.0-1.el7aos | 0:2.0.0-1.el7aos |
nss_wrapperRed Hat:openshift:3.1::el7 |
before 0:1.0.3-1.el7 | 0:1.0.3-1.el7 |
nss_wrapper-debuginfoRed Hat:openshift:3.1::el7 |
before 0:1.0.3-1.el7 | 0:1.0.3-1.el7 |
openshift-ansibleRed Hat:openshift:3.1::el7 |
before 0:3.0.35-1.git.0.6a386dd.el7aos | 0:3.0.35-1.git.0.6a386dd.el7aos |
openshift-ansible-docsRed Hat:openshift:3.1::el7 |
before 0:3.0.35-1.git.0.6a386dd.el7aos | 0:3.0.35-1.git.0.6a386dd.el7aos |
openshift-ansible-filter-pluginsRed Hat:openshift:3.1::el7 |
before 0:3.0.35-1.git.0.6a386dd.el7aos | 0:3.0.35-1.git.0.6a386dd.el7aos |
openshift-ansible-lookup-pluginsRed Hat:openshift:3.1::el7 |
before 0:3.0.35-1.git.0.6a386dd.el7aos | 0:3.0.35-1.git.0.6a386dd.el7aos |
openshift-ansible-playbooksRed Hat:openshift:3.1::el7 |
before 0:3.0.35-1.git.0.6a386dd.el7aos | 0:3.0.35-1.git.0.6a386dd.el7aos |
openshift-ansible-rolesRed Hat:openshift:3.1::el7 |
before 0:3.0.35-1.git.0.6a386dd.el7aos | 0:3.0.35-1.git.0.6a386dd.el7aos |
openvswitchRed Hat:openshift:3.1::el7 |
before 0:2.4.0-1.el7 | 0:2.4.0-1.el7 |
openvswitch-debuginfoRed Hat:openshift:3.1::el7 |
before 0:2.4.0-1.el7 | 0:2.4.0-1.el7 |
openvswitch-develRed Hat:openshift:3.1::el7 |
before 0:2.4.0-1.el7 | 0:2.4.0-1.el7 |
openvswitch-testRed Hat:openshift:3.1::el7 |
before 0:2.4.0-1.el7 | 0:2.4.0-1.el7 |
origin-kibanaRed Hat:openshift:3.1::el7 |
before 0:0.5.0-1.el7aos | 0:0.5.0-1.el7aos |
python-openvswitchRed Hat:openshift:3.1::el7 |
before 0:2.4.0-1.el7 | 0:2.4.0-1.el7 |
tuned-profiles-atomic-openshift-nodeRed Hat:openshift:3.1::el7 |
before 0:3.1.1.6-1.git.0.b57e8bd.el7aos | 0:3.1.1.6-1.git.0.b57e8bd.el7aos |
openshiftRed Hat:openshift:3.0::el7 |
before 0:3.0.2.0-0.git.45.423f434.el7ose | 0:3.0.2.0-0.git.45.423f434.el7ose |
openshift-clientsRed Hat:openshift:3.0::el7 |
before 0:3.0.2.0-0.git.45.423f434.el7ose | 0:3.0.2.0-0.git.45.423f434.el7ose |
openshift-masterRed Hat:openshift:3.0::el7 |
before 0:3.0.2.0-0.git.45.423f434.el7ose | 0:3.0.2.0-0.git.45.423f434.el7ose |
openshift-nodeRed Hat:openshift:3.0::el7 |
before 0:3.0.2.0-0.git.45.423f434.el7ose | 0:3.0.2.0-0.git.45.423f434.el7ose |
openshift-sdn-ovsRed Hat:openshift:3.0::el7 |
before 0:3.0.2.0-0.git.45.423f434.el7ose | 0:3.0.2.0-0.git.45.423f434.el7ose |
tuned-profiles-openshift-nodeRed Hat:openshift:3.0::el7 |
before 0:3.0.2.0-0.git.45.423f434.el7ose | 0:3.0.2.0-0.git.45.423f434.el7ose |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
github.com/openshift/origin/issues/6556
github.com/openshift/origin/pull/6576
access.redhat.com/errata/RHSA-2016:0070
access.redhat.com/errata/RHSA-2016:0351
nvd.nist.gov/vuln/detail/CVE-2016-1906
github.com/openshift/origin/commit/d95ec085f03ecf10e8c424a4f0340ddb38891406
Show 175 moreShow less
web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1906
access.redhat.com/security/cve/CVE-2016-1906
bugzilla.redhat.com/show_bug.cgi?id=1297916
github.com/advisories/GHSA-m3fm-h5jp-q79p
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=974814
bugzilla.redhat.com/show_bug.cgi?id=1063099
bugzilla.redhat.com/show_bug.cgi?id=1147758
bugzilla.redhat.com/show_bug.cgi?id=1147759
bugzilla.redhat.com/show_bug.cgi?id=1147764
bugzilla.redhat.com/show_bug.cgi?id=1147765
bugzilla.redhat.com/show_bug.cgi?id=1147766
bugzilla.redhat.com/show_bug.cgi?id=1147769
bugzilla.redhat.com/show_bug.cgi?id=1147770
bugzilla.redhat.com/show_bug.cgi?id=1148645
bugzilla.redhat.com/show_bug.cgi?id=1205615
bugzilla.redhat.com/show_bug.cgi?id=1205616
bugzilla.redhat.com/show_bug.cgi?id=1205620
bugzilla.redhat.com/show_bug.cgi?id=1205622
bugzilla.redhat.com/show_bug.cgi?id=1205623
bugzilla.redhat.com/show_bug.cgi?id=1205627
bugzilla.redhat.com/show_bug.cgi?id=1243514
bugzilla.redhat.com/show_bug.cgi?id=1247523
bugzilla.redhat.com/show_bug.cgi?id=1254880
bugzilla.redhat.com/show_bug.cgi?id=1256869
bugzilla.redhat.com/show_bug.cgi?id=1268478
bugzilla.redhat.com/show_bug.cgi?id=1273739
bugzilla.redhat.com/show_bug.cgi?id=1277329
bugzilla.redhat.com/show_bug.cgi?id=1277383
bugzilla.redhat.com/show_bug.cgi?id=1277608
bugzilla.redhat.com/show_bug.cgi?id=1278232
bugzilla.redhat.com/show_bug.cgi?id=1278630
bugzilla.redhat.com/show_bug.cgi?id=1279404
bugzilla.redhat.com/show_bug.cgi?id=1279744
bugzilla.redhat.com/show_bug.cgi?id=1279925
bugzilla.redhat.com/show_bug.cgi?id=1280216
bugzilla.redhat.com/show_bug.cgi?id=1280497
bugzilla.redhat.com/show_bug.cgi?id=1282359
bugzilla.redhat.com/show_bug.cgi?id=1282361
bugzilla.redhat.com/show_bug.cgi?id=1282362
bugzilla.redhat.com/show_bug.cgi?id=1282363
bugzilla.redhat.com/show_bug.cgi?id=1282364
bugzilla.redhat.com/show_bug.cgi?id=1282365
bugzilla.redhat.com/show_bug.cgi?id=1282366
bugzilla.redhat.com/show_bug.cgi?id=1282367
bugzilla.redhat.com/show_bug.cgi?id=1282368
bugzilla.redhat.com/show_bug.cgi?id=1282369
bugzilla.redhat.com/show_bug.cgi?id=1282371
bugzilla.redhat.com/show_bug.cgi?id=1282426
bugzilla.redhat.com/show_bug.cgi?id=1282738
bugzilla.redhat.com/show_bug.cgi?id=1283952
bugzilla.redhat.com/show_bug.cgi?id=1284506
bugzilla.redhat.com/show_bug.cgi?id=1287414
bugzilla.redhat.com/show_bug.cgi?id=1287943
bugzilla.redhat.com/show_bug.cgi?id=1288014
bugzilla.redhat.com/show_bug.cgi?id=1289603
bugzilla.redhat.com/show_bug.cgi?id=1289965
bugzilla.redhat.com/show_bug.cgi?id=1290643
bugzilla.redhat.com/show_bug.cgi?id=1290967
bugzilla.redhat.com/show_bug.cgi?id=1291795
bugzilla.redhat.com/show_bug.cgi?id=1291797
bugzilla.redhat.com/show_bug.cgi?id=1291798
bugzilla.redhat.com/show_bug.cgi?id=1292621
bugzilla.redhat.com/show_bug.cgi?id=1293251
bugzilla.redhat.com/show_bug.cgi?id=1293252
bugzilla.redhat.com/show_bug.cgi?id=1293829
bugzilla.redhat.com/show_bug.cgi?id=1293877
bugzilla.redhat.com/show_bug.cgi?id=1294115
bugzilla.redhat.com/show_bug.cgi?id=1294798
bugzilla.redhat.com/show_bug.cgi?id=1296457
bugzilla.redhat.com/show_bug.cgi?id=1297910
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0070.json
access.redhat.com/security/cve/CVE-2013-2186
cve.org/CVERecord?id=CVE-2013-2186
nvd.nist.gov/vuln/detail/CVE-2013-2186
access.redhat.com/security/cve/CVE-2014-1869
cve.org/CVERecord?id=CVE-2014-1869
nvd.nist.gov/vuln/detail/CVE-2014-1869
access.redhat.com/security/cve/CVE-2014-3661
cve.org/CVERecord?id=CVE-2014-3661
nvd.nist.gov/vuln/detail/CVE-2014-3661
access.redhat.com/security/cve/CVE-2014-3662
cve.org/CVERecord?id=CVE-2014-3662
nvd.nist.gov/vuln/detail/CVE-2014-3662
access.redhat.com/security/cve/CVE-2014-3663
cve.org/CVERecord?id=CVE-2014-3663
nvd.nist.gov/vuln/detail/CVE-2014-3663
access.redhat.com/security/cve/CVE-2014-3664
cve.org/CVERecord?id=CVE-2014-3664
nvd.nist.gov/vuln/detail/CVE-2014-3664
access.redhat.com/security/cve/CVE-2014-3666
cve.org/CVERecord?id=CVE-2014-3666
nvd.nist.gov/vuln/detail/CVE-2014-3666
access.redhat.com/security/cve/CVE-2014-3667
cve.org/CVERecord?id=CVE-2014-3667
nvd.nist.gov/vuln/detail/CVE-2014-3667
access.redhat.com/security/cve/CVE-2014-3680
cve.org/CVERecord?id=CVE-2014-3680
nvd.nist.gov/vuln/detail/CVE-2014-3680
access.redhat.com/security/cve/CVE-2014-3681
cve.org/CVERecord?id=CVE-2014-3681
nvd.nist.gov/vuln/detail/CVE-2014-3681
access.redhat.com/security/cve/CVE-2015-1806
cve.org/CVERecord?id=CVE-2015-1806
nvd.nist.gov/vuln/detail/CVE-2015-1806
wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-02-27
access.redhat.com/security/cve/CVE-2015-1807
cve.org/CVERecord?id=CVE-2015-1807
nvd.nist.gov/vuln/detail/CVE-2015-1807
access.redhat.com/security/cve/CVE-2015-1808
cve.org/CVERecord?id=CVE-2015-1808
nvd.nist.gov/vuln/detail/CVE-2015-1808
access.redhat.com/security/cve/CVE-2015-1810
cve.org/CVERecord?id=CVE-2015-1810
nvd.nist.gov/vuln/detail/CVE-2015-1810
access.redhat.com/security/cve/CVE-2015-1812
cve.org/CVERecord?id=CVE-2015-1812
nvd.nist.gov/vuln/detail/CVE-2015-1812
wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-03-23
access.redhat.com/security/cve/CVE-2015-1813
cve.org/CVERecord?id=CVE-2015-1813
nvd.nist.gov/vuln/detail/CVE-2015-1813
access.redhat.com/security/cve/CVE-2015-1814
cve.org/CVERecord?id=CVE-2015-1814
nvd.nist.gov/vuln/detail/CVE-2015-1814
access.redhat.com/security/cve/CVE-2015-5317
cve.org/CVERecord?id=CVE-2015-5317
nvd.nist.gov/vuln/detail/CVE-2015-5317
wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
cisa.gov/known-exploited-vulnerabilities-catalog
access.redhat.com/security/cve/CVE-2015-5318
cve.org/CVERecord?id=CVE-2015-5318
nvd.nist.gov/vuln/detail/CVE-2015-5318
access.redhat.com/security/cve/CVE-2015-5319
cve.org/CVERecord?id=CVE-2015-5319
nvd.nist.gov/vuln/detail/CVE-2015-5319
access.redhat.com/security/cve/CVE-2015-5320
cve.org/CVERecord?id=CVE-2015-5320
nvd.nist.gov/vuln/detail/CVE-2015-5320
access.redhat.com/security/cve/CVE-2015-5321
cve.org/CVERecord?id=CVE-2015-5321
nvd.nist.gov/vuln/detail/CVE-2015-5321
access.redhat.com/security/cve/CVE-2015-5322
cve.org/CVERecord?id=CVE-2015-5322
nvd.nist.gov/vuln/detail/CVE-2015-5322
access.redhat.com/security/cve/CVE-2015-5323
cve.org/CVERecord?id=CVE-2015-5323
nvd.nist.gov/vuln/detail/CVE-2015-5323
access.redhat.com/security/cve/CVE-2015-5324
cve.org/CVERecord?id=CVE-2015-5324
nvd.nist.gov/vuln/detail/CVE-2015-5324
access.redhat.com/security/cve/CVE-2015-5325
cve.org/CVERecord?id=CVE-2015-5325
nvd.nist.gov/vuln/detail/CVE-2015-5325
access.redhat.com/security/cve/CVE-2015-5326
cve.org/CVERecord?id=CVE-2015-5326
nvd.nist.gov/vuln/detail/CVE-2015-5326
access.redhat.com/security/cve/CVE-2015-7537
cve.org/CVERecord?id=CVE-2015-7537
nvd.nist.gov/vuln/detail/CVE-2015-7537
wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-12-09
access.redhat.com/security/cve/CVE-2015-7538
cve.org/CVERecord?id=CVE-2015-7538
nvd.nist.gov/vuln/detail/CVE-2015-7538
access.redhat.com/security/cve/CVE-2015-7539
cve.org/CVERecord?id=CVE-2015-7539
nvd.nist.gov/vuln/detail/CVE-2015-7539
access.redhat.com/security/cve/CVE-2015-8103
cve.org/CVERecord?id=CVE-2015-8103
nvd.nist.gov/vuln/detail/CVE-2015-8103
access.redhat.com/security/cve/CVE-2016-1905
cve.org/CVERecord?id=CVE-2016-1905
nvd.nist.gov/vuln/detail/CVE-2016-1905
cve.org/CVERecord?id=CVE-2016-1906
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0351.json