CVE-2013-4561: Critical severity red hat openshift vulnerability
In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity.
Other sources
Johnny Liu of Red Hat reports:
Description of problem: In openshift node, there is a cron job to update mcollective facts. cat /etc/cron.minutely/openshift-facts #!/bin/bash
PREFIX=""
if [ -f /opt/rh/ruby193/root/usr/libexec/mcollective/updateyaml.rb ]; then PREFIX="/opt/rh/ruby193/root" fi
oo-exec-ruby ${PREFIX}/usr/libexec/mcollective/updateyaml.rb ${PREFIX}/etc/mcollective/facts.yaml &> /tmp/facts.log
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4561?
CVE-2013-4561 has a medium severity rating due to potential impacts on confidentiality and integrity.
How do I fix CVE-2013-4561?
To fix CVE-2013-4561, ensure the mcollective cron job implements secure handling of temporary files.
What systems are affected by CVE-2013-4561?
CVE-2013-4561 affects Red Hat OpenShift nodes that use the vulnerable cron job configuration.
What type of vulnerability is CVE-2013-4561?
CVE-2013-4561 is a file handling vulnerability related to temporary files in cron jobs.
Who reported CVE-2013-4561?
CVE-2013-4561 was reported by Johnny Liu of Red Hat.