CVE-2014-0234: Critical severity red hat openshift vulnerability
Kurt Seifried of Red Hat reports:
The OpenShift Enterprise openshift-origin-broker configures a default password:
/etc/openshift/broker.conf:MONGOPASSWORD="mooo" /etc/openshift/broker.conf:MONGOPASSWORD="mongopass"
Please note that the optional installer also did this previously:
https://github.com/openshift/openshift-extras/blob/enterprise-2.0/enterprise/install-scripts/generic/openshift.sh
Other sources
The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this may overlap CVE-2013-4253 and CVE-2013-4281.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0234?
CVE-2014-0234 is classified as a high severity vulnerability due to its exploitation potential.
How do I fix CVE-2014-0234?
To fix CVE-2014-0234, change the default MongoDB password configured in /etc/openshift/broker.conf to a secure, unique password.
What software is affected by CVE-2014-0234?
CVE-2014-0234 affects Red Hat OpenShift versions up to 2.1.
Is CVE-2014-0234 a configuration issue?
Yes, CVE-2014-0234 is a configuration issue due to the use of default passwords.
Can CVE-2014-0234 lead to unauthorized access?
Yes, CVE-2014-0234 can lead to unauthorized access to the MongoDB database if not remediated.