CVE-2016-8631CWE-20

The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes

Medium · published July 31, 2018

CVSS v3.0
6.3
EPSS
1%
Percentile
65.7
In the wild
Unconfirmed
What it is

The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes. An attacker with access to create routes can potentially overwrite existing routes and redirect network traffic for other users to their own site.

The record
Technical detail
CVSS v3.0
6.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01122 · 65.7th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-07-31T20:00Z
EPSS history
Timeline
  • 31 JUL 20:00Z
    The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes
    cvelistv5