Red Hat Security Advisory

RHSA-2014:0422

openshift-origin-broker security update

Released 2014-04-23 · Red Hat rating Critical · View on Red Hat →

Fixed in

RHOSE Infrastructure 1.2 openshift-origin-broker-1.5.9-1.el6op, rubygem-openshift-origin-auth-remote-user-1.8.4-1.el6op

Fixes 1 record

TI-2014-00182 CVE-2014-0188 · GHSA-p2j4-wp52-g89q

The openshift-origin-broker in Red Hat OpenShift Enterprise 2.0.5, 1.2.7, and earlier…

LOW 36

The openshift-origin-broker in Red Hat OpenShift Enterprise 2.0.5, 1.2.7, and earlier does not properly handle authentication requests from the remote-user auth plugin, which allows remote attackers to bypass authenticat…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01654 Published 2014-04-24 Fixed CWE-287