Lucene search
HistoryAug 24, 2015 - 2:59 p.m.
CVE-2015-5222
red hat
openshift enterprise
cve-2015-5222
nvd
security vulnerability
8.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
50.7%
Red Hat OpenShift Enterprise 3.0.0.0 does not properly check permissions, which allows remote authenticated users with build permissions to execute arbitrary shell commands with root permissions on arbitrary build pods via unspecified vectors.
Affected configurations
Node
redhatopenshiftMatch3.0.0.0enterprise
| CPE | Name | Operator | Version |
|---|---|---|---|
| redhat:openshift | redhat openshift | eq | 3.0.0.0 |
References
Related
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:07:20
cvelist
cvelist
CVE-2015-5222
2015-08-24 14:00:00
nvd
nvd
CVE-2015-5222
2015-08-24 14:59:07
nessus
nessus
RHEL 7 : openshift (RHSA-2015:1650)
2018-12-04 00:00:00
prion
prion
Design/Logic Flaw
2015-08-24 14:59:00
redhat
redhat
(RHSA-2015:1650) Important: openshift security update
2015-08-20 19:17:04
8.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
50.7%
Related for CVE-2015-5222