Arbitrary Code Execution

2019-01-1509:07:55

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

53.3%

JSON

rubygem-openshift-origin-console is vulnerable to arbitrary code execution. A remote, authenticated user permitted to send requests to the Broker could execute arbitrary commands with elevated privileges on the Red Hat OpenShift server.

CPENameOperatorVersion
rubygem-openshift-origin-consoleeq1.23.4.4__1.el6op
rubygem-openshift-origin-consoleeq1.17.6__2.el6op
rubygem-openshift-origin-consoleeq1.33.2.1__1.el6op
rubygem-openshift-origin-consoleeq1.17.6.3__1.el6op
rubygem-openshift-origin-consoleeq1.32.1.1__1.el6op
rubygem-openshift-origin-consoleeq1.9.15__1.el6op
rubygem-openshift-origin-consoleeq1.32.2.1__1.el6op
rubygem-openshift-origin-consoleeq1.9.14__1.el6op
rubygem-openshift-origin-consoleeq1.0.10__1.el6op
rubygem-openshift-origin-consoleeq1.23.4.3__1.el6op

Name	Operator	Version
rubygem-openshift-origin-console	eq	1.23.4.4__1.el6op
rubygem-openshift-origin-console	eq	1.17.6__2.el6op
rubygem-openshift-origin-console	eq	1.33.2.1__1.el6op
rubygem-openshift-origin-console	eq	1.17.6.3__1.el6op
rubygem-openshift-origin-console	eq	1.32.1.1__1.el6op
rubygem-openshift-origin-console	eq	1.9.15__1.el6op
rubygem-openshift-origin-console	eq	1.32.2.1__1.el6op
rubygem-openshift-origin-console	eq	1.9.14__1.el6op
rubygem-openshift-origin-console	eq	1.0.10__1.el6op
rubygem-openshift-origin-console	eq	1.23.4.3__1.el6op