Red Hat Security Advisory

RHSA-2016:1038

openshift security update

Released 2016-05-11 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Enterprise 3.1 atomic-openshift-3.1.1.6-6.git.43.f583589.el7aos, atomic-openshift-clients-3.1.1.6-6.git.43.f583589.el7aos, atomic-openshift-clients-redistributable-3.1.1.6-6.git.43.f583589.el7aos +7

Fixes 1 record

TI-2016-01954 CVE-2016-2142 · GHSA-8qr6-wfrg-m44g

Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the…

LOW 25

Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master-config.yaml configuration file, which allows local users to obtain Active Directory credentials by reading the file.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00347 Published 2016-06-08 Fixed CWE-200