Red Hat Security AdvisoryRHSA-2013:0148
openshift-origin-node-util security update
Released 2013-01-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Enterprise Node openshift-origin-node-util-1.0.5-3.el6op
Fixes 2 records
Priority LOW 37
node-util/www/html/restorer.php in the Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to execute arbitrary commands via a crafted uuid in the PATH_INFO.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02185 · Published 2013-02-24 · Fixed CWE-20
Priority LOW 29
Open redirect vulnerability in node-util/www/html/restorer.php in Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the PAT…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.01459 · Published 2013-02-24 · Fixed CWE-20
