RHCOS 2 : openshift-origin-broker-util (RHSA-2014:0460)

The remote Red Hat Enterprise Linux CoreOS 2 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2014:0460 advisory. - mcollective: world readable client config CVE-2014-0164 Note that Nessus has not tested for this issue but has instead relied only on the...

RHEL 6 : openshift-origin-broker-util (RHSA-2014:0460)

An updated openshift-origin-broker-util package that fixes one security issue is now available for Red Hat OpenShift Enterprise 2.0.5. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

RHEL 6 : openshift-origin-broker-util (RHSA-2014:0461)

An updated openshift-origin-broker-util package that fixes one security issue is now available for Red Hat OpenShift Enterprise 1.2.7. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

CVE-2013-4364: Improper Link Resolution Before File Access

1 oo-analytics-export and 2 oo-analytics-import in the openshift-origin-broker-util package in Red Hat OpenShift Enterprise 1 and 2 allow local users to have unspecified impact via a symlink attack on an unspecified file in /tmp...

CVE-2014-0164: Undefined Security Weakness

openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file...