PT-2022-7748 · Red Hat · Openshift

Johnny Liu · Published 2022-06-30 · Updated 2022-07-11 · CVE-2013-4561

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions openshift (affected versions not specified)

Description The issue is related to a cron job in an openshift node that updates mcollective facts but mishandles a temporary file. This mishandling may lead to loss of confidentiality and integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-377

CWE-668

Related Identifiers

CVE-2013-4561

Affected Products

Openshift

References · 3

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=1029652 · Exploit
• https://github.com/openshift/origin-server/commit/f1abe972794e35a4bfba597694ce829990f14d39 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2013-4561 · Security Note