(RHSA-2014:0487) Important: Red Hat OpenShift Enterprise 2.1 Release Advisory

OpenShift Enterprise by Red Hat is the company’s cloud computing
Platform-as-a-Service (PaaS) solution designed for on-premise or private
cloud deployments.

It was discovered that openshift-origin-broker configured several default
user names and passwords for services if no user name or password was
specified during installation. A remote attacker could use these default
user names and passwords to access various parts of the OpenShift
Enterprise installation with the privileges of an administrative user.
(CVE-2014-0234)

This issue was discovered by Kurt Seifried of the Red Hat Security
Response Team.

The OpenShift Enterprise 2.1 Release Notes provide information about new
features and notable technical changes in this release, as well as notes on
initial installations. For more information about OpenShift Enterprise,
see the documentation available at:

https://access.redhat.com/site/documentation/en-US/OpenShift_Enterprise/2/

All OpenShift Enterprise users are advised to upgrade to release 2.1.