CVE-2016-2142

Name of the Vulnerable Software and Affected Versions Red Hat OpenShift Enterprise version 3.1

Description The issue concerns a configuration file with world-readable permissions, allowing local users to access sensitive information, specifically Active Directory credentials, by reading the file /etc/origin/master/master-config.yaml.

Recommendations For Red Hat OpenShift Enterprise version 3.1, consider changing the permissions of the /etc/origin/master/master-config.yaml file to restrict access and prevent unauthorized reading of the file. As a temporary workaround, restrict local access to the server to minimize the risk of exploitation.