CVE-2014-0164
openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world...
openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file.
Exploit likelihood
What each source reports
NVD Score used
openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file.
- Record
CVE-2014-0164- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file.
- Record
CVE-2014-0164- Updated
- 2026-11-02
EUVDEUVD-2014-0219 No score
openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file.
- Record
EUVD-2014-0219- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qrc5-rp7w-h34q No score
openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world...
openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file.
- Record
GHSA-qrc5-rp7w-h34q- Updated
- 2026-11-02
OSV No score
openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file.
- Record
CVE-2014-0164- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-0164 No score
openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file.
- Record
DEBIAN-CVE-2014-0164- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mcollectiveDebian:12 |
before 1.2.1+dfsg-2 | 1.2.1+dfsg-2 |
openshift-origin-broker-utilRed Hat:openshift:2.0::el6 |
before 0:1.17.6.6-1.el6op | 0:1.17.6.6-1.el6op |
openshift-origin-broker-utilRed Hat:openshift:1.2::el6 |
before 0:1.9.16-1.el6op | 0:1.9.16-1.el6op |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-0164 is a low vulnerability (CVSS 2.1) in Redhat Openshift, published May 5, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in mcollective 1.2.1+dfsg-2.
References
rhn.redhat.com/errata/RHSA-2014-0461.html
nvd.nist.gov/vuln/detail/CVE-2014-0164
access.redhat.com/errata/RHSA-2014:0460
Show 7 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=1083847
github.com/advisories/GHSA-qrc5-rp7w-h34q
security-tracker.debian.org/tracker/CVE-2014-0164
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0460.json
cve.org/CVERecord?id=CVE-2014-0164