ByteOS Network

NVD Vulnerability Details :

CVE-2016-7075

Modified

Source-secalert@redhat.com

Published At-10 Sep, 2018 | 14:29

Updated At-12 Feb, 2023 | 23:25

It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fields. An attacker could use this flaw to bypass authentication requirements by using a specially crafted X.509 certificate.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	8.1	HIGH	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary	3.0	7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

Kubernetes

>>kubernetes>>-

cpe:2.3:a:kubernetes:kubernetes:-:*:*:*:*:*:*:*

Red Hat, Inc.

>>openshift>>3.1

cpe:2.3:a:redhat:openshift:3.1:*:*:*:enterprise:*:*:*

Red Hat, Inc.

>>openshift>>3.2

cpe:2.3:a:redhat:openshift:3.2:*:*:*:enterprise:*:*:*

Red Hat, Inc.

>>openshift>>3.3

cpe:2.3:a:redhat:openshift:3.3:*:*:*:enterprise:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-295	Primary	secalert@redhat.com
CWE-295	Secondary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://access.redhat.com/errata/RHSA-2016:2064	secalert@redhat.com	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7075	secalert@redhat.com	Issue Tracking Third Party Advisory
https://github.com/kubernetes/kubernetes/issues/34517	secalert@redhat.com	Exploit Patch Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History