2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
Red Hat OpenShift Enterprise is a cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments. Refer to the Red Hat OpenShift Enterprise 1.1 Release Notes for information about the changes in this release. The Release Notes will be available shortly from https://access.redhat.com/knowledge/docs/ This update also fixes the following security issues: It was found that the master cryptographic key of Jenkins could be retrieved via the HTTP server that is hosting Jenkins. A remote attacker could use this flaw to access the server and execute arbitrary code with the privileges of the user running Jenkins. Note that this issue only affected Jenkins instances that had slaves attached and that also allowed anonymous read access (not the default configuration). Manual action is also required to correct this issue. Refer to βJenkins Security Advisory 2013-01-04β, linked to in the References, for further information. (CVE-2013-0158) When the rhc-chk script was run in debug mode, its output included sensitive information, such as database passwords, in plain text. As this script is commonly used when troubleshooting, this flaw could lead to users unintentionally exposing sensitive information in support channels (for example, a Bugzilla report). This update removes the rhc-chk script. (CVE-2012-5658) Multiple flaws in the Jenkins web interface could allow a remote attacker to perform HTTP response splitting and cross-site scripting (XSS) attacks, as well as redirecting a victim to an arbitrary page by utilizing an open redirect flaw. (CVE-2012-6072, CVE-2012-6074, CVE-2012-6073) A flaw was found in the way rubygem-activerecord dynamic finders extracted options from method parameters. A remote attacker could possibly use this flaw to perform SQL injection attacks against applications using the Active Record dynamic finder methods. (CVE-2012-6496) The openshift-port-proxy-cfg program created a temporary file in an insecure way. A local attacker could use this flaw to perform a symbolic link attack, overwriting an arbitrary file accessible to the root user with a β0β or a β1β, which could lead to a denial of service. By default, OpenShift uses polyinstantiation (per user) for the /tmp/ directory, minimizing the risk of exploitation by local attackers. (CVE-2013-0164) The CVE-2013-0164 issue was discovered by Michael Scherer of the Red Hat Regional IT team. Users of Red Hat OpenShift Enterprise 1.0 are advised to upgrade to Red Hat OpenShift Enterprise 1.1.
rhn.redhat.com/errata/RHSA-2013-0220.html
www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-01-04.cb
www.openwall.com/lists/oss-security/2013/01/07/4
access.redhat.com/knowledge/docs/
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=855264
bugzilla.redhat.com/show_bug.cgi?id=864921
bugzilla.redhat.com/show_bug.cgi?id=872415
bugzilla.redhat.com/show_bug.cgi?id=873765
bugzilla.redhat.com/show_bug.cgi?id=873768
bugzilla.redhat.com/show_bug.cgi?id=874511
bugzilla.redhat.com/show_bug.cgi?id=874750
bugzilla.redhat.com/show_bug.cgi?id=874751
bugzilla.redhat.com/show_bug.cgi?id=874757
bugzilla.redhat.com/show_bug.cgi?id=874799
bugzilla.redhat.com/show_bug.cgi?id=874845
bugzilla.redhat.com/show_bug.cgi?id=875657
bugzilla.redhat.com/show_bug.cgi?id=876324
bugzilla.redhat.com/show_bug.cgi?id=876465
bugzilla.redhat.com/show_bug.cgi?id=876644
bugzilla.redhat.com/show_bug.cgi?id=876937
bugzilla.redhat.com/show_bug.cgi?id=876939
bugzilla.redhat.com/show_bug.cgi?id=877158
bugzilla.redhat.com/show_bug.cgi?id=877407
bugzilla.redhat.com/show_bug.cgi?id=883527
bugzilla.redhat.com/show_bug.cgi?id=885587
bugzilla.redhat.com/show_bug.cgi?id=885598
bugzilla.redhat.com/show_bug.cgi?id=886159
bugzilla.redhat.com/show_bug.cgi?id=888043
bugzilla.redhat.com/show_bug.cgi?id=888056
bugzilla.redhat.com/show_bug.cgi?id=888671
bugzilla.redhat.com/show_bug.cgi?id=889088
bugzilla.redhat.com/show_bug.cgi?id=889095
bugzilla.redhat.com/show_bug.cgi?id=889125
bugzilla.redhat.com/show_bug.cgi?id=892781
bugzilla.redhat.com/show_bug.cgi?id=892795
bugzilla.redhat.com/show_bug.cgi?id=892990
bugzilla.redhat.com/show_bug.cgi?id=893288
bugzilla.redhat.com/show_bug.cgi?id=893895
bugzilla.redhat.com/show_bug.cgi?id=896406
github.com/jenkinsci/jenkins/commit/3dc13b957b14cec649036e8dd517f0f9cb21fb04
github.com/jenkinsci/jenkins/commit/4895eaafca468b7f0f1a3166b2fca7414f0d5da5
github.com/jenkinsci/jenkins/commit/94a8789b699132dd706021a6be1b78bc47f19602
github.com/jenkinsci/jenkins/commit/a9aff088f327278a8873aef47fa8f80d3c5932fd
github.com/jenkinsci/jenkins/commit/c3d8e05a1b3d58b6c4dcff97394cb3a79608b4b2
rhn.redhat.com/errata/RHSA-2013-0220.html
wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-01-04