{"id":"CVE-2016-2149","aliases":["EUVD-2016-3250","GHSA-rvh3-qxj7-9f8x","RHSA-2016:1064"],"status":"published","title":"Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another...","description":"Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another namespace by using the same name as a previously deleted namespace when creating a new namespace.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-06","score":0.01565,"percentile":0.7541,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2016-06-08T17:00:00Z","modified":"2026-06-27T10:04:29Z","affected":[{"source":"osv","ecosystem":"Red Hat:openshift:3.2::el7","package":"atomic-openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0.20-1.git.0.f44746c.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.2::el7","package":"atomic-openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0.20-1.git.0.f44746c.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.2::el7","package":"atomic-openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0.20-1.git.0.f44746c.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.2::el7","package":"atomic-openshift-dockerregistry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0.20-1.git.0.f44746c.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.2::el7","package":"atomic-openshift-master","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0.20-1.git.0.f44746c.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.2::el7","package":"atomic-openshift-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0.20-1.git.0.f44746c.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.2::el7","package":"atomic-openshift-pod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0.20-1.git.0.f44746c.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.2::el7","package":"atomic-openshift-recycle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0.20-1.git.0.f44746c.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.2::el7","package":"atomic-openshift-sdn-ovs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0.20-1.git.0.f44746c.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.2::el7","package":"atomic-openshift-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0.20-1.git.0.f44746c.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.2::el7","package":"tuned-profiles-atomic-openshift-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0.20-1.git.0.f44746c.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.2::el7","package":"nodejs-openshift-auth-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.20-1.el7aos"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.2::el7","package":"nodejs-proxy-addr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.8-2.el7aos"}]}],"bundled":3}],"products":[{"vendor":"redhat","product":"openshift"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2016:1064","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2149","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316267","tags":["report"]},{"url":"https://github.com/advisories/GHSA-rvh3-qxj7-9f8x"},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://docs.openshift.com/enterprise/3.2/release_notes/ose_3_2_release_notes.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1252520","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1264500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1276038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1278719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1278974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1279344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1282733","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1284700","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1285763","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1291958","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1293805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1293830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1293850","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1296232","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1297521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1298942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1299466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1299756","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300570","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1301425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1302512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1302894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1303085","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1303171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1304526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1304582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1304975","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1305165","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1305417","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1305765","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1306011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1306590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1306805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1307013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1307170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1308312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1308540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1309192","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1309205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1309435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1310001","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1310062","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1310498","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1310567","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1310572","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1310587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1310606","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1310616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1310959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311049","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311396","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1312819","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1312826","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1314142","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1314270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1314645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1315157","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1315190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1315563","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1315564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1315595","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1315607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1315637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316216","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316233","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317835","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317851","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1318395","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1318681","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1318726","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1318975","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1319439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320335","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320430","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1321258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1321289","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1321308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1321309","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1321569","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1322077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1322314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1322335","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1322338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1322538","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1322718","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1322788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1322942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1323123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1323633","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1324273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1324357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1324418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1326214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1326319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1326446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1327126","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328067","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328822","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1330050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1331038","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1064.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2149","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2160","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2160","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2160","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3711","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3711","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3711","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2016-2149","description":"Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another namespace by using the same name as a previously deleted namespace when creating a new namespace.","status":"published","published":"2016-06-08T17:00:00Z","modified":"2024-08-05T23:17:50.741Z","updated_at":"2026-11-02T14:33:33.07583Z"}],"euvd":[{"id":"EUVD-2016-3250","description":"Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another namespace by using the same name as a previously deleted namespace when creating a new namespace.","status":"published","published":"2016-06-08T17:00:00Z","modified":"2024-08-05T23:17:50Z","updated_at":"2026-11-03T02:22:54.125931Z"}],"ghsa":[{"id":"GHSA-rvh3-qxj7-9f8x","title":"Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another...","description":"Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another namespace by using the same name as a previously deleted namespace when creating a new namespace.","status":"published","published":"2022-05-17T03:54:23Z","modified":"2023-02-10T05:07:17Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:54:03.896291Z"}],"nvd":[{"id":"CVE-2016-2149","description":"Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another namespace by using the same name as a previously deleted namespace when creating a new namespace.","status":"published","published":"2016-06-08T17:59:01.767Z","modified":"2026-06-17T00:43:32.113Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:26.642445Z"}],"osv":[{"id":"RHSA-2016:1064","title":"Red Hat Security Advisory: Red Hat OpenShift Enterprise 3.2 security, bug fix, and enhancement update","status":"published","published":"2024-09-15T23:18:36Z","modified":"2026-06-27T10:04:29Z","updated_at":"2026-11-02T15:53:03.734507Z"}]}}