PT-2014-5359 · Red Hat · Openshift Origin+1

Published 2014-06-20 · Updated 2023-02-13 · CVE-2014-3496

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenShift Origin and Enterprise versions 1.2.8 through 2.1.1

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with certain file extensions in a cartridge manifest file. This can occur with file extensions such as .tar.gz, .zip, .tgz, or .tar.

Recommendations For OpenShift Origin and Enterprise versions 1.2.8 through 2.1.1, consider restricting the use of cartridge manifest files with untrusted Source-Url entries to minimize the risk of exploitation. Avoid using the Source-Url parameter with unverified file extensions in the cartridge manifest file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2014-3496

RHSA-2014:0762

RHSA-2014:0763

RHSA-2014:0764

Affected Products

Openshift Enterprise

Openshift Origin

References · 7

• http://rhn.redhat.com/errata/RHSA-2014-0764.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0763.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-3496 · Security Note
• http://rhn.redhat.com/errata/RHSA-2014-0762.html · Vendor Advisory
• https://github.com/openshift/origin-server/pull/5521 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1110470 · Note
• http://secunia.com/advisories/59298 · Note