OpenShift Enterprise by Red Hat is the company’s cloud computing
Platform-as-a-Service (PaaS) solution designed for on-premise or
private cloud deployments.
A command injection flaw was found in the rubygem-openshift-origin-
console. A remote, authenticated user permitted to send requests to
the Broker could execute arbitrary commands with elevated privileges
on the Red Hat OpenShift server. (CVE-2015-5274)
All rubygem-openshift-origin-console users are advised to upgrade to this
updated package, which contains a backported patch to correct this issue.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 6 | src | rubygem-openshift-origin-console | < 1.34.1.3-1.el6op | rubygem-openshift-origin-console-1.34.1.3-1.el6op.src.rpm |
RedHat | 6 | noarch | rubygem-openshift-origin-console | < 1.34.1.3-1.el6op | rubygem-openshift-origin-console-1.34.1.3-1.el6op.noarch.rpm |