Red Hat Security Advisory

RHSA-2014:0461

openshift-origin-broker-util security update

Released 2014-05-01 · Red Hat rating Important · View on Red Hat →

Fixed in

RHOSE Infrastructure 1.2 openshift-origin-broker-util-1.9.16-1.el6op

Fixes 1 record

TI-2014-00158 CVE-2014-0164 · GHSA-qrc5-rp7w-h34q

openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5…

LOW 11

openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.0038 Published 2014-05-05 Partial fix CWE-310