CVE-2016-8651CWE-20

An input validation flaw was found in the way OpenShift 3 handles requests for images

Low · published August 1, 2018

CVSS v3.0
3.1
EPSS
1%
Percentile
70.8
In the wild
Unconfirmed
What it is

An input validation flaw was found in the way OpenShift 3 handles requests for images. A user, with a copy of the manifest associated with an image, can pull an image even if they do not have access to the image normally, resulting in the disclosure of any information contained within the image.

The record
Technical detail
CVSS v3.0
3.1 · LOW
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01334 · 70.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-08-01T16:00Z
EPSS history
Timeline
  • 01 AUG 16:00Z
    An input validation flaw was found in the way OpenShift 3 handles requests for images
    cvelistv5