Back to bug 1390735

Who When What Removed Added
Kurt Seifried 2016-11-01 18:54:09 UTC Blocks 1388808
Kurt Seifried 2016-11-01 18:54:58 UTC Depends On 1387428
Kurt Seifried 2016-11-02 23:08:22 UTC CC sparks
Doc Text The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes. An attacker with access to create routes can potentially overwrite existing routes and redirect network traffic for other users to their own site.
Flags needinfo?(sparks)
Eric Christensen 2016-11-03 01:00:22 UTC CC sparks
Flags needinfo?(sparks)
Kurt Seifried 2016-11-16 01:05:24 UTC Status NEW CLOSED
Resolution --- ERRATA
Last Closed 2016-11-15 20:05:24 UTC
Product Security DevOps Team 2019-09-29 13:59:56 UTC Whiteboard impact=moderate,public=20161101,reported=20161101,source=redhat,cvss2=6.0/AV:N/AC:M/Au:S/C:P/I:P/A:P,cvss3=6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L,cwe=CWE-20,openshift-enterprise-3/Security=affected

Back to bug 1390735