CVE-2014-3674: High severity red hat openshift vulnerability
Published Nov 13, 2014
·Updated
Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors.
Affected Software
16 affected components
redhat Openshift<=2.1.8
redhat Openshift=2.0
redhat Openshift=2.0.1
redhat Openshift=2.0.2
redhat Openshift=2.0.3
redhat Openshift=2.0.4
redhat Openshift=2.0.5
redhat Openshift=2.0.6
redhat Openshift=2.1
redhat Openshift=2.1.1
redhat Openshift=2.1.2
redhat Openshift=2.1.3
redhat Openshift=2.1.4
redhat Openshift=2.1.5
redhat Openshift=2.1.6
redhat Openshift=2.1.7
Event History
Nov 13, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-3674?
CVE-2014-3674 is classified as a high severity vulnerability due to its potential to allow unauthorized access to network resources.
2
How do I fix CVE-2014-3674?
To fix CVE-2014-3674, you should update to Red Hat OpenShift Enterprise version 2.2 or later.
3
What versions of Red Hat OpenShift are affected by CVE-2014-3674?
CVE-2014-3674 affects all versions of Red Hat OpenShift Enterprise prior to 2.2.
4
What types of access does CVE-2014-3674 allow to attackers?
CVE-2014-3674 allows remote attackers to access the network resources of arbitrary gears.
5
Is there a workaround for CVE-2014-3674 if I cannot upgrade?
There is no official workaround for CVE-2014-3674; upgrading to a secure version is the recommended action.