CVE-2016-5392: Red Hat Openshift

Medium severity, CVSS 6.5. EPSS: 2.5% chance of exploitation in the next 30 days.

The API server in Kubernetes, as used in Red Hat OpenShift Enterprise 3.2, in a multi tenant environment allows remote authenticated users with knowledge of other project names to obtain sensitive project and user information via vectors related to the watch-cache list.

Affected products

• Red Hat Openshift: version 3.2 only

Published 2016-08-05. Last modified 2026-06-17.