World-readable Permissions

The openshift-origin-broker-util package has world-readable permission vulnerability. It happens because the package sets the permissions for mcollective client.cfg configuration as world-readable by default, leakaging sensitive information regarding the mcollective installation, including mcollective authentication credentials. Using sensitive information leakage, an attacker can take control of all OpenShift nodes managed via mcollective.