Red Hat Security AdvisoryRHSA-2014:1796
Red Hat OpenShift Enterprise 2.2 Release Advisory
Released 2014-11-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Enterprise Client 2.2 rhc-1.31.3.1-1.el6op, rubygem-archive-tar-minitar-0.5.2-3.1.el6op, rubygem-commander-4.0.3-4.el6op +11
- Red Hat OpenShift Enterprise Infrastructure 2.2 activemq-5.9.0-5.redhat.610328.el6op, activemq-client-5.9.0-5.redhat.610328.el6op, js-1.70-12.el6op +47
- Red Hat OpenShift Enterprise JBoss EAP add-on 2.2 openshift-origin-cartridge-dependencies-optional-jbosseap-1.27.1.0-1.el6op, openshift-origin-cartridge-dependencies-recommended-jbosseap-1.27.1.0-1.el6op, openshift-origin-cartridge-jbosseap-2.21.1.0-1.el6op
- Red Hat OpenShift Enterprise Node 2.2 CharLS-1.0-1.el6op, CharLS-devel-1.0-1.el6op, ImageMagick-6.5.4.7-7.el6_5 +47
Fixes 2 records
Priority LOW 37
Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02058 · Published 2014-11-13 · Fixed CWE-264
Priority LOW 11
Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number information for remote systems by reading /proc/net/tcp.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00375 · Published 2014-11-13 · Partial fix CWE-264
