CVE-2016-3708 describes a vulnerability in Red Hat OpenShift Enterprise 3.2, specifically when multi-tenant SDN is enabled. This flaw allows authenticated users to bypass network isolation between namespaces, gaining unauthorized access to resources on restricted pods during an s2i build. The vulnerability has a CVSS score of 7.1 (HIGH), indicating it can be exploited remotely with low attack complexity, leading to high impact on integrity and low impact on confidentiality. Despite its severity, there is currently no public exploit intelligence, Metasploit modules, or community discussion, suggesting it is not actively exploited or widely known.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.2CPE matchmatch criteria | cpe:2.3:a:redhat:openshift:3.2:*:*:*:enterprise:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.