What’s Vulnerable › Vulnerabilities

CVE-2016-8651

• Severity: low (CVSS 3.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-08-01 · updated 2026-06-17
• Weakness: CWE-20

Description

An input validation flaw was found in the way OpenShift 3 handles requests for images. A user, with a copy of the manifest associated with an image, can pull an image even if they do not have access to the image normally, resulting in the disclosure of any information contained within the image.

Affected products

• Openshift: 3.0
• Red Hat OpenShift Container Platform 4.18: 3.1, 3.2, 3.3

References

• http://www.securityfocus.com/bid/94935
• https://access.redhat.com/errata/RHSA-2016:2915
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8651
• http://www.securityfocus.com/bid/94935
• https://access.redhat.com/errata/RHSA-2016:2915
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8651

Get alerted when CVE-2016-8651 or the next vulnerability affects your stack