Root Command Execution

🗓️ 27 Apr 2017 07:24:20Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 18 Views

vulnerability in openshift origin for root command executio

Reporter	Title	Published	Views	Family All 12
CNVD	Red Hat OpenShift Enterprise Elevation of Privilege Vulnerability	13 May 201600:00	–	cnvd
CVE	CVE-2016-2160	8 Jun 201617:00	–	cve
Cvelist	CVE-2016-2160	8 Jun 201617:00	–	cvelist
EUVD	EUVD-2016-3252	7 Oct 202500:30	–	euvd
NVD	CVE-2016-2160	8 Jun 201617:59	–	nvd
OSV	CVE-2016-2160	8 Jun 201617:59	–	osv
OSV	RHSA-2016:1064 Red Hat Security Advisory: Red Hat OpenShift Enterprise 3.2 security, bug fix, and enhancement update	15 Sep 202423:18	–	osv
Prion	Command injection	8 Jun 201617:59	–	prion
Tenable Nessus	RHEL 7 : Red Hat OpenShift Enterprise 3.2 (RHSA-2016:1064)	4 Dec 201800:00	–	nessus
Tenable Nessus	RHCOS 3 : Red Hat OpenShift Enterprise 3.2 (RHSA-2016:1064)	4 May 202600:00	–	nessus

Vulners

Node

openshift originMatchhead

OR

-nodejs-osenvMatch0.0.3_5.el7

OR

-nodejs-json-stringify-safeMatch5.0.0_1.el7

OR

-nodejs-mimeMatch1.2.11_1.el7

OR

-python-mimeparseMatch0.1.4_1.el7ost

OR

-nodejs-sntpMatch0.2.4_1.el7

OR

jenkins jenkinsMatch1.625.3_2.el7aos

OR

-openshift-elasticsearch-pluginMatch0.7.0.redhat_1_1.el7

OR

-nodejs-read-all-streamMatch1.0.2_1.el7

OR

-nodejs-stream-combinerMatch0.2.1_1.el7

OR

-nodejs-raw-bodyMatch1.1.4_1.el7

OR

-nodejs-optimistMatch0.4.0_1.el7

OR

nodejs node.jsMatch0.5.4_2.el7rc.3

OR

-nodejs-wordwrapMatch0.0.2_4.el7

OR

getadigital nested-object-assignMatch2.0.0_2.el7node.js

OR

getadigital nested-object-assignMatch2.0.0_3.el7aosnode.js

OR

-nodejs-minimistMatch0.0.1_2.el7

OR

-nodejs-boomMatch0.4.2_2.el7

OR

-nodejs-commanderMatch2.2.0_1.el7

OR

-nodejs-splitMatch0.3.3_1.el7

OR

elasticsearch elasticsearchMatch0.90.10_6.el7sat

OR

elasticsearch elasticsearchMatch0.90.10_7.el7

OR

-nodejs-globMatch3.2.6_1.el7

OR

-rubygem-fluent-plugin-elasticsearchMatch0.7.0_1.el7ost

OR

-rubygem-fluent-plugin-elasticsearchMatch1.0.0_2.el7aos

OR

-nodejs-findup-syncMatch0.1.3_1.el7

OR

ansible ansibleMatch1.9.3_2.el7aos

OR

-nodejs-is-streamMatch1.0.1_1.el7

OR

-nodejs-mkdirpMatch0.3.5_3.el7

OR

-nodejs-has-colorMatch0.1.7_1.el7

OR

-nodejs-debugMatch0.8.1_1.el7

OR

-nodejs-pause-streamMatch0.0.11_1.el7

OR

-nodejs-minimatchMatch0.2.12_2.el7

OR

-nodejs-asyncMatch0.2.10_1.el7

OR

-nodejs-blMatch0.9.3_1.el7

OR

-nodejs-fromMatch0.1.3_1.el7

OR

-heapsterMatch0.18.2_3.gitaf4752e.el7aos

OR

-heapsterMatch0.18.2_2.gitaf4752e.el7aos

OR

-nodejs-requestMatch2.25.0_1.el7

OR

-nodejs-normalize-pathMatch0.3.0_1.el7

OR

-nodejs-readable-streamMatch1.1.9_1.el7

OR

-nodejs-chalkMatch0.4.0_2.el7

OR

-python-linecache2Match1.0.0_1.el7ost

OR

-nodejs-pinkie-promiseMatch1.0.0_1.el7

OR

cookie-signature_project cookie-signatureMatch1.0.3_1.el7node.js

OR

fluentd fluentdMatch0.12.5_3.el7ost

OR

fluentd fluentdMatch0.12.16_1.el7aos

OR

search-guard search_guardMatch0.5.0.redhat_1_1.el7

OR

-nodejs-event-streamMatch3.1.7_1.el7

OR

-nodejs-merge-descriptorsMatch0.0.2_1.el7

OR

-nodejs-freshMatch0.2.2_1.el7

OR

-nodejs-cryptilesMatch0.2.2_1.el7

OR

-nodejs-qsMatch0.6.6_3.el7

OR

-nodejs-inheritsMatch2.0.0_4.el7

OR

-nodejs-methodsMatch0.1.0_1.el7

OR

-nodejs-hawkMatch1.0.0_1.el7

OR

-nodejs-iconv-liteMatch0.2.11_1.el7

OR

-nodejs-concat-streamMatch1.4.4_2.el7

OR

-nodejs-statusesMatch1.2.1_1.el7

OR

-nodejs-hoekMatch0.9.1_1.el7

OR

-nodejs-delayed-streamMatch0.0.5_5.el7

OR

-elastic-curatorMatch3.2.3_1.el7

OR

-nodejs-slideMatch1.1.5_1.el7

OR

-nodejs-strip-ansiMatch0.2.0_1.el7

OR

rest-client_project rest-clientMatch1.6.7_1.el7satruby

OR

-nodejs-gotMatch2.2.0_3.el7

OR

-nodejs-msMatch0.6.2_1.el7

OR

-nodejs-pinkieMatch1.0.0_1.el7

OR

kibanaMatch3.1.2_2.el7ost

OR

-rubygem-multi_jsonMatch1.7.1_1.el7

OR

-rubygem-multi_jsonMatch1.8.2_4.el7sat

OR

-nodejs-bytesMatch0.3.0_1.el7

OR

-nodejs-yargsMatch1.3.3_1.el7

OR

-nodejs-sendMatch0.3.0_4.el7

OR

kind-of_project kind-ofMatch2.0.1_1.el7aos

OR

-nodejs-align-textMatch0.1.3_1.el7aos

OR

-python-unittest2Match1.1.0_4.el7

OR

-python-unittest2Match1.0.1_1.el7ost

OR

-python-unittest2Match0.5.1_7.el7ev

OR

-nodejs-form-dataMatch0.1.1_1.el7

OR

-nodejs-asn1Match0.1.11_3.el7

OR

-nodejs-morganMatch1.0.0_2.el7

OR

-nodejs-registry-urlMatch2.0.0_3.el7

OR

-nodejs-cookieMatch0.1.2_1.el7

OR

-nodejs-lowercase-keysMatch1.0.0_1.el7

OR

-nodejs-ansi-stylesMatch1.0.0_1.el7

OR

httplib2_project httplib2Match0.7.7_3.el7ostpython

OR

httplib2_project httplib2Match0.6.0_6.el7satpython

OR

-nodejs-iniMatch1.1.0_3.el7

OR

-nodejs-graceful-fsMatch2.0.0_2.el7

OR

node-uuid_project node-uuidMatch1.4.1_1.el7node.js

OR

-nodejs-onceMatch1.1.1_5.el7

OR

-nodejs-tunnel-agentMatch0.3.0_1.el7

OR

-nodejs-negotiatorMatch0.4.3_1.el7

OR

-rubygem-rackMatch1.4.1_13.el7sat

OR

-origin-kibanaMatch0.4_3.el7aos

OR

-nodejs-oauth-signMatch0.3.0_1.el7

OR

cockpitMatch0.77_3.el7

OR

-nodejs-combined-streamMatch0.0.4_3.el7

OR

-nodejs-supports-colorMatch1.2.0_2.el7

OR

-nodejs-resolveMatch0.5.0_1.el7

OR

-nodejs-duplexifyMatch3.2.0_2.el7

OR

-nodejs-throughMatch2.3.4_2.el7

OR

-nodejs-extendMatch1.3.0_1.el7

OR

-python-contextlib2Match0.4.0_2.el7ost

OR

joyent http-signatureMatch0.10.0_3.el7node.js

OR

-nodejs-map-streamMatch0.0.5_1.el7

OR

-nodejs-range-parserMatch1.0.0_1.el7

OR

openvswitch openvswitchMatch2.1.2_2.el7_0.2

OR

openvswitch openvswitchMatch2.0.0_7.el7

OR

openvswitch openvswitchMatch2.3.2_1.git20150730.el7_1

OR

openvswitch openvswitchMatch2.3.1_2.git20150113.el7

OR

openvswitch openvswitchMatch2.4.0_1.el7

OR

openvswitch openvswitchMatch2.1.2_2.el7_0.1

OR

-v8Match3.14.5.10_11.el7sat

OR

-v8Match3.14.5.10_2.el7ost

OR

-python-pbrMatch0.10.8_1.el7

OR

-python-pbrMatch0.7.0_1.el7

OR

-python-pbrMatch1.8.0_1.el7ost

OR

atomic-openshiftMatch3.1.1.6_4.git.32.adf8ec9.el7aos

OR

atomic-openshiftMatch3.1.1.6_6.git.43.f583589.el7aos

OR

atomic-openshiftMatch3.1.0.4_1.git.10.ec10652.el7aos

OR

atomic-openshiftMatch3.1.1.6_3.git.16.5327e56.el7aos

OR

atomic-openshiftMatch3.1.1.6_1.git.0.b57e8bd.el7aos

OR

atomic-openshiftMatch3.1.1.6_4.git.21.cd70c35.el7aos

OR

atomic-openshiftMatch3.1.0.4_1.git.15.5e061c3.el7aos

OR

atomic-openshiftMatch3.1.0.4_1.git.4.b6c7cd2.el7aos

OR

-nodejs-forever-agentMatch0.5.0_1.el7

OR

-python-elasticsearchMatch1.4.0_2.el7ost

OR

-nodejs-prepend-httpMatch1.0.1_1.el7

OR

-nodejs-semverMatch2.1.0_3.el7

OR

-nodejs-readdirpMatch0.4.0_1.el7

OR

-nodejs-noptMatch2.1.2_1.el7

OR

python_software_foundation paramikoMatch1.15.1_1.el7

OR

python_software_foundation paramikoMatch1.7.7.1_3.el7

OR

python_software_foundation paramikoMatch1.15.1_2.el7ost

OR

python_software_foundation paramikoMatch1.15.1_1.el7ost

OR

python_software_foundation paramikoMatch1.11.3_1.el7ost

OR

openshift originRange≤1.1.3

Source	Link
github	www.github.com/openshift/origin/pull/7864
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

15 May 2019 06:18Current

8.9High risk

Vulners AI Score8.9

CVSS 38.8

CVSS 29

EPSS0.04027

openshift vulnerability root privileges software security