CVE-2014-3602

Опубликовано: 13 нояб. 2014

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number information for remote systems by reading /proc/net/tcp.

Ссылки

http://rhn.redhat.com/errata/RHSA-2014-1796.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2014-1906.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2014-1796.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2014-1906.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:openshift:*:*:*:*:enterprise:*:*:*

Версия до 2.1.8 (включая)

cpe:2.3:a:redhat:openshift:2.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openshift:2.0.1:*:enterprise:*:*:*:*:*

cpe:2.3:a:redhat:openshift:2.0.2:*:enterprise:*:*:*:*:*

cpe:2.3:a:redhat:openshift:2.0.3:*:enterprise:*:*:*:*:*

cpe:2.3:a:redhat:openshift:2.0.4:*:enterprise:*:*:*:*:*

cpe:2.3:a:redhat:openshift:2.0.5:*:enterprise:*:*:*:*:*

cpe:2.3:a:redhat:openshift:2.0.6:*:*:*:enterprise:*:*:*

cpe:2.3:a:redhat:openshift:2.1:*:*:*:enterprise:*:*:*

cpe:2.3:a:redhat:openshift:2.1.1:*:*:*:enterprise:*:*:*

cpe:2.3:a:redhat:openshift:2.1.2:*:*:*:enterprise:*:*:*

cpe:2.3:a:redhat:openshift:2.1.3:*:*:*:enterprise:*:*:*

cpe:2.3:a:redhat:openshift:2.1.4:*:*:*:enterprise:*:*:*

cpe:2.3:a:redhat:openshift:2.1.5:*:*:*:enterprise:*:*:*

cpe:2.3:a:redhat:openshift:2.1.6:*:*:*:enterprise:*:*:*

cpe:2.3:a:redhat:openshift:2.1.7:*:*:*:enterprise:*:*:*

EPSS

Процентиль: 30%

0.00114

Низкий

2.1 Low

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2014-3602

redhat

больше 11 лет назад

Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number information for remote systems by reading /proc/net/tcp.

GHSA-7ggv-2g22-cxqr

github

больше 3 лет назад

Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number information for remote systems by reading /proc/net/tcp.

EPSS

Процентиль: 30%

0.00114

Низкий

2.1 Low

CVSS2

Дефекты

CWE-264