CVE-2016-3708: Red Hat Openshift

High severity, CVSS 7.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Red Hat OpenShift Enterprise 3.2, when multi-tenant SDN is enabled and a build is run in a namespace that would normally be isolated from pods in other namespaces, allows remote authenticated users to access network resources on restricted pods via an s2i build with a builder image that (1) contains ONBUILD commands or (2) does not contain a tar binary.

Affected products

• Red Hat Openshift: version 3.2 only

Published 2016-06-08. Last modified 2026-06-17.