Lucene search

K
cve[email protected]CVE-2014-3602
HistoryNov 13, 2014 - 9:32 p.m.

CVE-2014-3602

2014-11-1321:32:00
CWE-264
web.nvd.nist.gov
23
red hat
openshift
enterprise
security vulnerability
cve-2014-3602
ip address
port number
nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number information for remote systems by reading /proc/net/tcp.

Affected configurations

NVD
Node
redhatopenshiftRange2.1.8enterprise
OR
redhatopenshiftMatch2.0
OR
redhatopenshiftMatch2.0.1enterprise
OR
redhatopenshiftMatch2.0.2enterprise
OR
redhatopenshiftMatch2.0.3enterprise
OR
redhatopenshiftMatch2.0.4enterprise
OR
redhatopenshiftMatch2.0.5enterprise
OR
redhatopenshiftMatch2.0.6enterprise
OR
redhatopenshiftMatch2.1enterprise
OR
redhatopenshiftMatch2.1.1enterprise
OR
redhatopenshiftMatch2.1.2enterprise
OR
redhatopenshiftMatch2.1.3enterprise
OR
redhatopenshiftMatch2.1.4enterprise
OR
redhatopenshiftMatch2.1.5enterprise
OR
redhatopenshiftMatch2.1.6enterprise
OR
redhatopenshiftMatch2.1.7enterprise

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%