CVE-2015-0238: Infoleak
Marcos reports that selinux-policy can be abused to gain access to process listing information.
Other sources
selinux-policy as packaged in Red Hat OpenShift 2 allows attackers to obtain process listing information via a privilege escalation attack.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0238?
CVE-2015-0238 is classified as a high severity vulnerability due to the potential for privilege escalation.
How do I fix CVE-2015-0238?
To mitigate CVE-2015-0238, it is recommended to update to the latest version of the selinux-policy package provided by Red Hat.
Which versions of Red Hat OpenShift are affected by CVE-2015-0238?
CVE-2015-0238 affects Red Hat OpenShift version 2.0.
What type of attack does CVE-2015-0238 facilitate?
CVE-2015-0238 facilitates a privilege escalation attack that allows unauthorized access to process listing information.
Is there a known exploit for CVE-2015-0238?
While there are no specific exploits publicly documented for CVE-2015-0238, the vulnerability allows for potential unauthorized access if exploited.