CVE-2014-3602: Low severity red hat openshift vulnerability
Published Nov 13, 2014
·Updated
Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number information for remote systems by reading /proc/net/tcp.
Affected Software
16 affected components
redhat Openshift<=2.1.8
redhat Openshift=2.0
redhat Openshift=2.0.1
redhat Openshift=2.0.2
redhat Openshift=2.0.3
redhat Openshift=2.0.4
redhat Openshift=2.0.5
redhat Openshift=2.0.6
redhat Openshift=2.1
redhat Openshift=2.1.1
redhat Openshift=2.1.2
redhat Openshift=2.1.3
redhat Openshift=2.1.4
redhat Openshift=2.1.5
redhat Openshift=2.1.6
redhat Openshift=2.1.7
Event History
Nov 13, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-3602?
CVE-2014-3602 has a medium severity level due to the potential exposure of sensitive information.
2
How do I fix CVE-2014-3602?
To fix CVE-2014-3602, update Red Hat OpenShift to version 2.2 or later.
3
What systems are affected by CVE-2014-3602?
CVE-2014-3602 affects Red Hat OpenShift Enterprise versions prior to 2.2, specifically versions 2.1.8 and earlier.
4
What type of vulnerability is CVE-2014-3602?
CVE-2014-3602 is classified as an information disclosure vulnerability.
5
Can local users exploit CVE-2014-3602 remotely?
No, CVE-2014-3602 allows local users to obtain information, meaning it requires local access to exploit.