CVE-2016-8631
published 2018-07-31CVE-2016-8631: The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes. An attacker with access to create routes can potentially…
PriorityP339high7.7CVSS 3.0
AVNACLPRLUINSCCNIHAN
EPSS
1.10%
62.0th percentile
The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes. An attacker with access to create routes can potentially overwrite existing routes and redirect network traffic for other users to their own site.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| red_hat | openshift_enterprise | — | — |
| redhat | openshift | — | — |
| redhat | openshift | — | — |
CVSS provenance
nvdv3.07.7HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N
vendor_redhat6.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-973m-857j-grqw: The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes
ghsa_unreviewed·2022-05-13
CVE-2016-8631 [HIGH] CWE-20 GHSA-973m-857j-grqw: The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes
The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes. An attacker with access to create routes can potentially overwrite existing routes and redirect network traffic for other users to their own site.
Red Hat
3: Router sometimes selects new routes over old routes when determining claimed hostnames
vendor_redhat·2016-11-01·CVSS 6.3
CVE-2016-8631 [MEDIUM] CWE-20 3: Router sometimes selects new routes over old routes when determining claimed hostnames
3: Router sometimes selects new routes over old routes when determining claimed hostnames
The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes. An attacker with access to create routes can potentially overwrite existing routes and redirect network traffic for other users to their own site.
The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes. An attacker with access to create routes can potentially overwrite existing routes and redirect network traffic for other users to their own site.
No detection rules found.
No public exploits indexed.
2018-07-31
Published