CVE-2016-7075: Kubernetes

High severity, CVSS 8.1. EPSS: 1.6% chance of exploitation in the next 30 days.

It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fields. An attacker could use this flaw to bypass authentication requirements by using a specially crafted X.509 certificate.

Affected products

• Kubernetes Kubernetes: affected versions not specified
• Red Hat Openshift: version 3.1 only; version 3.2 only; version 3.3 only

Published 2018-09-10. Last modified 2026-06-17.