CVE-2016-1906: kubernetes
CVSS: 10.0v2.0HighModified
AliasesCGA-2q4w-53mp-h3hhCGA-3vcm-8x8j-vfq4CGA-53gw-qqr6-jx39CGA-8cxp-mgf2-v65xCGA-95xp-rv5c-xm43CGA-f3r7-gmmx-658qCGA-mg2h-64hc-c8g7CGA-rxx4-gpfg-rvcjGHSA-m3fm-h5jp-q79pGO-2022-0854CGA-c85v-rv2r-hxpjCGA-fgq8-jh6m-34f4CGA-gj3q-q5pv-2fxfCGA-h3vm-x4x5-x7w3CGA-hffq-h49p-w9g9CGA-j976-jw96-6gccCGA-p29m-hh3g-rwx5CGA-p7j2-fjf4-739m
Published 03-02-2016Last modified 05-08-2024
Vulnerability summary
CVE-2016-1906 is a high (CVSS 10.0) vulnerability in kubernetes. EPSS estimates a 4.84% chance of exploitation in the next 30 days, higher than 91.9% of scored vulnerabilities.
CVSS score
10.0/10
010
High · v2.0 (NVD)EPSS score
4.84%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 2 · Related 16RHSA-2016:0070RHSA-2016:0351CGA-3RG2-772X-CX36CGA-4P6Q-M6M9-G98XCGA-4RW5-J6G6-WJHPCGA-5Q55-VP4X-749PCGA-8R4M-7J95-Q4HQCGA-9V8H-5C98-HW46CGA-C5HQ-9HHV-RMQ6CGA-CRPV-J4M8-5VXPCGA-G933-MMVH-52HVCGA-G9FM-VCQW-V763CGA-HF3P-9WV3-9R8CCGA-J277-9M27-H352CGA-M92W-5PJW-MV8QCGA-QRX7-8HGH-FMP7CGA-VJR3-CWGF-34H8CGA-XX28-CPM7-XF72
Timeline
- 03-02-2016PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.
CVSS metrics
5 scores · 4 sources · 2 versionsCritical 9.8Preferred score · NVD (NIST)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 4 agree
- OSV · WolfiEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · GoEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · ChainguardEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
High 10.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
4.84%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 4.84% on 20-09-2026
20-09-202620-10-2026
EPSS score4.84%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Chainguard8 products
- kubernetes-1.30All versions (No fix recorded)
- kubernetes-1.31All versions (No fix recorded)
- kubernetes-1.32All versions (No fix recorded)
- kubernetes-1.33All versions (No fix recorded)
- kubernetes-1.34All versions (No fix recorded)
Wolfi4 products
- kubernetes-1.34All versions (No fix recorded)
- kubernetes-1.35All versions (No fix recorded)
- kubernetes-1.36All versions (No fix recorded)
- kubernetes-1.37All versions (No fix recorded)
Github.com/openshift1 product
- origin< 1.1.1
Kubernetes1 product
4 vendors · 14 products
