Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2014-3674

Опубликовано: 03 нояб. 2014
Источник: redhat
CVSS2: 3.6
EPSS Низкий

Описание

Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors.

It was found that OpenShift Enterprise 2.1 did not properly restrict access to services running on different gears. This could allow an attacker to access unprotected network resources running in another user's gear.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-284
https://bugzilla.redhat.com/show_bug.cgi?id=1148170Enterprise: gears fail to properly isolate network traffic

EPSS

Процентиль: 67%
0.00542
Низкий

3.6 Low

CVSS2

Связанные уязвимости

nvd
около 11 лет назад

Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors.

github
больше 3 лет назад

Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors.

EPSS

Процентиль: 67%
0.00542
Низкий

3.6 Low

CVSS2