CVE-2016-3738

Name of the Vulnerable Software and Affected Versions Red Hat OpenShift Enterprise version 3.2

Description The issue is related to improper access restriction to STI builds, allowing remote authenticated users to access the Docker socket and gain privileges. This is achieved through vectors related to build-pod.

Recommendations For Red Hat OpenShift Enterprise version 3.2, consider restricting access to the Docker socket as a temporary workaround until a patch is available. Additionally, review and restrict build-pod related vectors to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.