Remote Code Execution (RCE)

2019-01-1508:54:05

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.012 Low

EPSS

Percentile

85.2%

JSON

rubygem-openshift-origin-node is vulnerable to remote code execution. A remote authenticated user is permitted to install cartridges via the web interface, which would allow a remote attacker to abuse the application behavior to execute arbitrary code on the system with root privileges.

CPENameOperatorVersion
rubygem-openshift-origin-nodeeq1.17.5.4__1.el6op
rubygem-openshift-origin-nodeeq1.17.5.6__1.el6op
rubygem-openshift-origin-nodeeq1.9.14.5__1.el6op
rubygem-openshift-origin-nodeeq1.23.9.3__1.el6op
rubygem-openshift-origin-nodeeq1.9.14.7__1.el6op
rubygem-openshift-origin-nodeeq1.17.5__2.el6op
rubygem-openshift-origin-nodeeq1.23.9.8__1.el6op
rubygem-openshift-origin-nodeeq1.17.5.11__1.el6op
rubygem-openshift-origin-nodeeq1.23.9.4__1.el6op
rubygem-openshift-origin-nodeeq1.0.7__1.el6op

Name	Operator	Version
rubygem-openshift-origin-node	eq	1.17.5.4__1.el6op
rubygem-openshift-origin-node	eq	1.17.5.6__1.el6op
rubygem-openshift-origin-node	eq	1.9.14.5__1.el6op
rubygem-openshift-origin-node	eq	1.23.9.3__1.el6op
rubygem-openshift-origin-node	eq	1.9.14.7__1.el6op
rubygem-openshift-origin-node	eq	1.17.5__2.el6op
rubygem-openshift-origin-node	eq	1.23.9.8__1.el6op
rubygem-openshift-origin-node	eq	1.17.5.11__1.el6op
rubygem-openshift-origin-node	eq	1.23.9.4__1.el6op
rubygem-openshift-origin-node	eq	1.0.7__1.el6op