CVE-2014-0164

EUVD-2014-0219
openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 10%
Affected Products (NVD)
VendorProductVersion
redhatopenshift
1.2.7
redhatopenshift
2.0.5
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
mcollective
bookworm
2.12.5+dfsg-1.1
fixed
bullseye
2.12.5+dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mcollective
lucid
dne
precise
not-affected
quantal
not-affected
saucy
not-affected
trusty
dne
Common Weakness Enumeration
References
http://rhn.redhat.com/errata/RHSA-2014-0460.html
http://rhn.redhat.com/errata/RHSA-2014-0461.html
http://rhn.redhat.com/errata/RHSA-2014-0460.html
http://rhn.redhat.com/errata/RHSA-2014-0461.html