CVE-2016-3703 Missing authorization in n/a

Medium 5.3 Published 8 Jun 2016 Updated 6 Aug 2024

Remote attackers can steal API credentials from browser storage when anonymous access is enabled, potentially leading to account takeover.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2016-3703?

CVE-2016-3703 is a medium-severity missing authorization vulnerability in Redhat Openshift, published on 8 Jun 2016. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or pod/proxy API for a specific pod, which allows remote attackers to access API credentials in the web browser localStorage via an access_token in the query parameter.

Weakness: CWE-284

Which versions are affected by CVE-2016-3703?

It affects 1 product.

Linux distribution packages (10)

`atomic-openshift` Red Hat:openshift:3.1::el7	All versions	`0:3.1.1.6-8.git.64.80b61da.el7aos`
`atomic-openshift-clients` Red Hat:openshift:3.1::el7	All versions	`0:3.1.1.6-8.git.64.80b61da.el7aos`
`atomic-openshift-clients-redistributable` Red Hat:openshift:3.1::el7	All versions	`0:3.1.1.6-8.git.64.80b61da.el7aos`
`atomic-openshift-dockerregistry` Red Hat:openshift:3.1::el7	All versions	`0:3.1.1.6-8.git.64.80b61da.el7aos`
`atomic-openshift-master` Red Hat:openshift:3.1::el7	All versions	`0:3.1.1.6-8.git.64.80b61da.el7aos`
`atomic-openshift-node` Red Hat:openshift:3.1::el7	All versions	`0:3.1.1.6-8.git.64.80b61da.el7aos`
`atomic-openshift-pod` Red Hat:openshift:3.1::el7	All versions	`0:3.1.1.6-8.git.64.80b61da.el7aos`
`atomic-openshift-recycle` Red Hat:openshift:3.1::el7	All versions	`0:3.1.1.6-8.git.64.80b61da.el7aos`
`atomic-openshift-sdn-ovs` Red Hat:openshift:3.1::el7	All versions	`0:3.1.1.6-8.git.64.80b61da.el7aos`
`tuned-profiles-atomic-openshift-node` Red Hat:openshift:3.1::el7	All versions	`0:3.1.1.6-8.git.64.80b61da.el7aos`

Products include Redhat Openshift.

How do I fix CVE-2016-3703?

Apply the vendor's patch.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2016-3703 being exploited?

There is no known exploitation of CVE-2016-3703 in the wild and no public exploit code.

All Redhat Openshift vulnerabilities

Sources

Also known as GHSA-xhrq-h87x-w62q, RHSA-2016:1095.