Lucene search
RedHatRHSA-2014:0762HistoryJun 18, 2014 - 12:00 a.m.
(RHSA-2014:0762) Critical: rubygem-openshift-origin-node security update
2014-06-1800:00:00
access.redhat.com
15
0.012 Low
EPSS
Percentile
85.2%
The rubygem-openshift-origin-node package provides basic OpenShift node
functionality.
A command injection flaw was found in rubygem-openshift-origin-node.
A remote, authenticated user permitted to install cartridges via the web
interface could use this flaw to execute arbitrary code with root
privileges on the Red Hat OpenShift node server. (CVE-2014-3496)
This issue was discovered by Jeremy Choi of the Red Hat HSS Pen-test Team.
All rubygem-openshift-origin-node users are advised to upgrade to this
updated package, which contains a backported patch to correct this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 6 | src | rubygem-openshift-origin-node | < 1.9.14.8-1.el6op | rubygem-openshift-origin-node-1.9.14.8-1.el6op.src.rpm |
| RedHat | 6 | noarch | rubygem-openshift-origin-node | < 1.9.14.8-1.el6op | rubygem-openshift-origin-node-1.9.14.8-1.el6op.noarch.rpm |
Related
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 08:54:05
nvd
nvd
CVE-2014-3496
2014-06-20 14:55:07
cve
cve
CVE-2014-3496
2014-06-20 14:55:07
nessus
nessus
RHEL 6 : rubygem-openshift-origin-node (RHSA-2014:0763)
2018-12-04 00:00:00
RHEL 6 : rubygem-openshift-origin-node (RHSA-2014:0762)
2018-12-04 00:00:00
RHEL 6 : rubygem-openshift-origin-node (RHSA-2014:0764)
2018-12-04 00:00:00
prion
prion
Design/Logic Flaw
2014-06-20 14:55:00
redhat
redhat
(RHSA-2014:0763) Critical: rubygem-openshift-origin-node security update
2014-06-18 00:00:00
(RHSA-2014:0764) Critical: rubygem-openshift-origin-node security update
2014-06-18 00:00:00
cvelist
cvelist
CVE-2014-3496
2014-06-20 14:00:00