PT-2014-5446 · Red Hat · Red Hat Openshift Enterprise

CVE-2014-3674 · Publicado 2014-11-13 · Atualizado 2023-02-13

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Red Hat OpenShift Enterprise versions prior to 2.2

Description The issue allows remote attackers to access the network resources of arbitrary gears via unspecified vectors due to improper access restriction to gears.

Recommendations For versions prior to 2.2, update to version 2.2 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-3674

RHSA-2014:1796

RHSA-2014:1906

Produtos afetados

Red Hat Openshift Enterprise

Referências · 3

• http://rhn.redhat.com/errata/RHSA-2014-1796.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-3674 · Nota de Segurança
• http://rhn.redhat.com/errata/RHSA-2014-1906.html · Aviso do Fabricante