CVE-2016-3711

Severity: low (CVSS 3.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-06-08 · updated 2026-06-17
Weakness: CWE-200

Description

HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address of a pod by reading the "OPENSHIFT_[namespace]_SERVERID" cookie.

Affected products

Openshift: 3.2
rubygem-openshift-origin-node: all versions

References

https://access.redhat.com/errata/RHSA-2016:1064
https://github.com/openshift/origin/pull/8334
https://access.redhat.com/errata/RHSA-2016:1064
https://github.com/openshift/origin/pull/8334

Get alerted when CVE-2016-3711 or the next vulnerability affects your stack