Lucene search
Veracode Vulnerability DatabaseVERACODE:11428HistoryJan 15, 2019 - 9:01 a.m.
Arbitrary Code Execution
2019-01-1509:01:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
EPSS
0.003
Percentile
70.4%
rubygem-openshift-origin-node is vulnerable to arbitrary code execution attacks. The vulnerability exists as Red Hat OpenShift Enterprise 2.0 and 2.1 and OpenShift Origin allow remote authenticated users to execute arbitrary commands via shell metacharacters in a directory name that is referenced by a cartridge using the file: URI scheme.
References
rhn.redhat.com/errata/RHSA-2014-0529.html
rhn.redhat.com/errata/RHSA-2014-0530.html
access.redhat.com/errata/RHSA-2014:0529
access.redhat.com/errata/RHSA-2014:0530
access.redhat.com/security/cve/CVE-2014-0233
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=1096955
rhn.redhat.com/errata/RHSA-2014-0530.html
Related
redhat
redhat
(RHSA-2014:0530) Important: rubygem-openshift-origin-node security update
2014-05-21 00:00:00
(RHSA-2014:0529) Important: rubygem-openshift-origin-node security update
2014-05-21 00:00:00
nessus
nessus
RHEL 6 : rubygem-openshift-origin-node (RHSA-2014:0529)
2018-12-04 00:00:00
RHEL 6 : rubygem-openshift-origin-node (RHSA-2014:0530)
2018-12-04 00:00:00
nvd
nvd
CVE-2014-0233
2014-11-16 11:59:01
cvelist
cvelist
CVE-2014-0233
2014-11-16 11:00:00
prion
prion
Design/Logic Flaw
2014-11-16 11:59:00
cve
cve
CVE-2014-0233
2014-11-16 11:59:01