CVE-2016-3738

CVE-2016-3738 affects Red Hat OpenShift Enterprise 3.2, where the STI build process does not restrict access properly. This vulnerability allows remote authenticated users to access the Docker socket and escalate privileges via build-pod related vectors. The issue originates from insufficient acc...

Important: Red Hat Security Advisory: Red Hat OpenShift Enterprise 3.2 security update

An update for atomic-openshift and nodejs-node-uuid is now available for Red Hat OpenShift Enterprise 3.2. In addition, all images have been rebuilt on the new RHEL 7.2.4 base image. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...