EUVD-2014-0272

Malware in sbrugna...

CVE-2013-4253

The deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat Openshift 1, installs a default public key in the root user's authorizedkeys file...

CVE-2013-4253

The CVE-2013-4253 entry relates to Red Hat OpenShift 1’s OpenShift Extras deployment script, where the script installs a default public key into the root user’s authorized_keys file. This is the concrete vulnerability detail present in the connected Red Hat advisory and NVD entries. The descripti...

CVE-2013-4253

The deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat Openshift 1, installs a default public key in the root user's authorizedkeys file...

Design/Logic Flaw

The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this m...