CVE-2014-3674
Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows...
Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors.
Exploit likelihood
What each source reports
NVD Score used
7.5
Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors.
- Record
CVE-2014-3674- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors.
- Record
CVE-2014-3674- Updated
- 2026-11-02
EUVDEUVD-2014-3622 No score
Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors.
- Record
EUVD-2014-3622- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cwr8-rjvx-3529 No score
Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows...
Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors.
- Record
GHSA-cwr8-rjvx-3529- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rhcRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.31.3.1-1.el6op | 0:1.31.3.1-1.el6op |
rubygem-archive-tar-minitarRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.5.2-3.1.el6op | 0:0.5.2-3.1.el6op |
rubygem-commanderRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:4.0.3-4.el6op | 0:4.0.3-4.el6op |
rubygem-highlineRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.6.16-1.el6op | 0:1.6.16-1.el6op |
rubygem-httpclientRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.4.0-3.el6op | 0:2.4.0-3.el6op |
rubygem-net-scpRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.1.2-2.el6op | 0:1.1.2-2.el6op |
rubygem-net-sshRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.7.0-1.el6op | 0:2.7.0-1.el6op |
rubygem-net-ssh-gatewayRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.2.0-1.el6op | 0:1.2.0-1.el6op |
rubygem-net-ssh-multiRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.2.0-1.el6op | 0:1.2.0-1.el6op |
rubygem-open4Red Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.3.0-2.el6op | 0:1.3.0-2.el6op |
Show 190 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rubygem-parseconfigRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.5.2-5.el6op | 0:0.5.2-5.el6op |
rubygem-test-unitRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.2.0-3.el6op | 0:2.2.0-3.el6op |
rubygemsRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.8.24-6.el6op | 0:1.8.24-6.el6op |
rubygems-develRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.8.24-6.el6op | 0:1.8.24-6.el6op |
activemqRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:5.9.0-5.redhat.610328.el6op | 0:5.9.0-5.redhat.610328.el6op |
activemq-clientRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:5.9.0-5.redhat.610328.el6op | 0:5.9.0-5.redhat.610328.el6op |
jsRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.70-12.el6op | 0:1.70-12.el6op |
js-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.70-12.el6op | 0:1.70-12.el6op |
js-develRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.70-12.el6op | 0:1.70-12.el6op |
json-cRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.10-3.el6op | 0:0.10-3.el6op |
json-c-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.10-3.el6op | 0:0.10-3.el6op |
json-c-develRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.10-3.el6op | 0:0.10-3.el6op |
json-c-docRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.10-3.el6op | 0:0.10-3.el6op |
libestrRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.1.9-2.el6op | 0:0.1.9-2.el6op |
libestr-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.1.9-2.el6op | 0:0.1.9-2.el6op |
libestr-develRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.1.9-2.el6op | 0:0.1.9-2.el6op |
libevRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:4.04-4.el6op | 0:4.04-4.el6op |
libev-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:4.04-4.el6op | 0:4.04-4.el6op |
libev-develRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:4.04-4.el6op | 0:4.04-4.el6op |
libmongodbRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.4.6-2.el6op | 0:2.4.6-2.el6op |
mod_passengerRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.0.21-12.el6op | 0:3.0.21-12.el6op |
mongodbRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.4.6-2.el6op | 0:2.4.6-2.el6op |
mongodb-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.4.6-2.el6op | 0:2.4.6-2.el6op |
mongodb-serverRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.4.6-2.el6op | 0:2.4.6-2.el6op |
openshift-enterprise-releaseRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.2.0.4-1.el6op | 0:2.2.0.4-1.el6op |
openshift-enterprise-upgradeRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.2.0.4-1.el6op | 0:2.2.0.4-1.el6op |
openshift-enterprise-upgrade-brokerRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.2.0.4-1.el6op | 0:2.2.0.4-1.el6op |
openshift-enterprise-yum-validatorRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.2.0.4-1.el6op | 0:2.2.0.4-1.el6op |
openshift-origin-brokerRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.16.2.1-1.el6op | 0:1.16.2.1-1.el6op |
openshift-origin-broker-utilRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.30.4.0-1.el6op | 0:1.30.4.0-1.el6op |
openshift-origin-consoleRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.16.3.0-2.el6op | 0:1.16.3.0-2.el6op |
openshift-origin-logshifterRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.8.1.0-1.el6op | 0:1.8.1.0-1.el6op |
openshift-origin-msg-commonRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.21.1.0-1.el6op | 0:1.21.1.0-1.el6op |
openshift-origin-util-sclRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.19.1.0-1.el6op | 0:1.19.1.0-1.el6op |
rsyslog7Red Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:7.4.10-3.el6op | 0:7.4.10-3.el6op |
rsyslog7-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:7.4.10-3.el6op | 0:7.4.10-3.el6op |
rsyslog7-mmopenshiftRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:7.4.10-3.el6op | 0:7.4.10-3.el6op |
ruby-RMagickRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.13.1-6.el6op.1 | 0:2.13.1-6.el6op.1 |
ruby-RMagick-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.13.1-6.el6op.1 | 0:2.13.1-6.el6op.1 |
ruby193-jsRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 1:1.8.5-10.el6op | 1:1.8.5-10.el6op |
ruby193-js-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 1:1.8.5-10.el6op | 1:1.8.5-10.el6op |
ruby193-js-develRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 1:1.8.5-10.el6op | 1:1.8.5-10.el6op |
ruby193-mcollectiveRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.4.1-6.el6op | 0:2.4.1-6.el6op |
ruby193-mcollective-clientRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.4.1-6.el6op | 0:2.4.1-6.el6op |
ruby193-mcollective-commonRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.4.1-6.el6op | 0:2.4.1-6.el6op |
ruby193-mod_passengerRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.0.21-3.el6op | 0:3.0.21-3.el6op |
ruby193-ruby-mysqlRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.8.2-8.el6op | 0:2.8.2-8.el6op |
ruby193-ruby-mysql-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.8.2-8.el6op | 0:2.8.2-8.el6op |
ruby193-ruby-wrapperRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.0.2-2.el6op | 0:0.0.2-2.el6op |
ruby193-rubygem-bsonRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.8.1-1.el6op | 0:1.8.1-1.el6op |
ruby193-rubygem-bson_extRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.8.1-2.el6op | 0:1.8.1-2.el6op |
ruby193-rubygem-bson_ext-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.8.1-2.el6op | 0:1.8.1-2.el6op |
ruby193-rubygem-chunky_pngRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.2.6-3.el6op | 0:1.2.6-3.el6op |
ruby193-rubygem-compassRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.12.2-4.el6op | 0:0.12.2-4.el6op |
ruby193-rubygem-compass-railsRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0.3-2.el6op | 0:1.0.3-2.el6op |
ruby193-rubygem-daemon_controllerRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.1.0-1.el6op | 0:1.1.0-1.el6op |
ruby193-rubygem-daemonsRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0.10-4.el6op | 0:1.0.10-4.el6op |
ruby193-rubygem-dnsrubyRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.53-3.el6op | 0:1.53-3.el6op |
ruby193-rubygem-exconRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.32.1-2.el6op | 0:0.32.1-2.el6op |
ruby193-rubygem-excon-docRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.32.1-2.el6op | 0:0.32.1-2.el6op |
ruby193-rubygem-fastthreadRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0.7-7.el6op | 0:1.0.7-7.el6op |
ruby193-rubygem-fastthread-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0.7-7.el6op | 0:1.0.7-7.el6op |
ruby193-rubygem-file-tailRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0.5-5.el6op | 0:1.0.5-5.el6op |
ruby193-rubygem-fogRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.21.0-3.el6op | 0:1.21.0-3.el6op |
ruby193-rubygem-fog-brightboxRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.0.1-2.el6op | 0:0.0.1-2.el6op |
ruby193-rubygem-fog-coreRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.21.1-2.el6op | 0:1.21.1-2.el6op |
ruby193-rubygem-fog-docRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.21.0-3.el6op | 0:1.21.0-3.el6op |
ruby193-rubygem-fog-jsonRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0.0-2.el6op | 0:1.0.0-2.el6op |
ruby193-rubygem-fog-json-docRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0.0-2.el6op | 0:1.0.0-2.el6op |
ruby193-rubygem-formatadorRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.2.1-9.el6op | 0:0.2.1-9.el6op |
ruby193-rubygem-formatador-docRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.2.1-9.el6op | 0:0.2.1-9.el6op |
ruby193-rubygem-formtasticRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.2.4-2.el6op | 0:1.2.4-2.el6op |
ruby193-rubygem-fssmRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.2.8.1-2.el6op | 0:0.2.8.1-2.el6op |
ruby193-rubygem-hamlRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:4.0.3-2.el6op | 0:4.0.3-2.el6op |
ruby193-rubygem-httpclientRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.4.0-1.el6op | 0:2.4.0-1.el6op |
ruby193-rubygem-jquery-railsRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.1.0-1.el6op | 0:3.1.0-1.el6op |
ruby193-rubygem-jsonRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.7.3-5.el6op | 0:1.7.3-5.el6op |
ruby193-rubygem-json-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.7.3-5.el6op | 0:1.7.3-5.el6op |
ruby193-rubygem-json_pureRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.7.3-1.el6 | 0:1.7.3-1.el6 |
ruby193-rubygem-minitestRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.5.0-3.el6op | 0:3.5.0-3.el6op |
ruby193-rubygem-mongoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.8.1-1.el6op | 0:1.8.1-1.el6op |
ruby193-rubygem-mongoidRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.1.4-2.el6op | 0:3.1.4-2.el6op |
ruby193-rubygem-mopedRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.5.0-2.el6op | 0:1.5.0-2.el6op |
ruby193-rubygem-net-ldapRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.3.1-1.el6op | 0:0.3.1-1.el6op |
ruby193-rubygem-net-scpRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.1.2-1.el6op | 0:1.1.2-1.el6op |
ruby193-rubygem-net-scp-docRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.1.2-1.el6op | 0:1.1.2-1.el6op |
ruby193-rubygem-net-sshRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.7.0-1.el6op | 0:2.7.0-1.el6op |
ruby193-rubygem-net-ssh-docRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.7.0-1.el6op | 0:2.7.0-1.el6op |
ruby193-rubygem-nokogiriRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.5.11-1.el6op | 0:1.5.11-1.el6op |
ruby193-rubygem-nokogiri-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.5.11-1.el6op | 0:1.5.11-1.el6op |
ruby193-rubygem-nokogiri-docRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.5.11-1.el6op | 0:1.5.11-1.el6op |
ruby193-rubygem-open4Red Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.3.0-3.el6op | 0:1.3.0-3.el6op |
ruby193-rubygem-originRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0.7-2.el6op | 0:1.0.7-2.el6op |
ruby193-rubygem-parseconfigRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0.2-1.el6op | 0:1.0.2-1.el6op |
ruby193-rubygem-passengerRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.0.21-3.el6op | 0:3.0.21-3.el6op |
ruby193-rubygem-passenger-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.0.21-3.el6op | 0:3.0.21-3.el6op |
ruby193-rubygem-passenger-develRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.0.21-3.el6op | 0:3.0.21-3.el6op |
ruby193-rubygem-passenger-nativeRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.0.21-3.el6op | 0:3.0.21-3.el6op |
ruby193-rubygem-passenger-native-libsRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.0.21-3.el6op | 0:3.0.21-3.el6op |
ruby193-rubygem-pgRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.12.2-4.el6op | 0:0.12.2-4.el6op |
ruby193-rubygem-pg-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.12.2-4.el6op | 0:0.12.2-4.el6op |
ruby193-rubygem-rdiscountRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.6.8-3.el6op | 0:1.6.8-3.el6op |
ruby193-rubygem-rdiscount-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.6.8-3.el6op | 0:1.6.8-3.el6op |
ruby193-rubygem-reginRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.3.7-4.el6op | 0:0.3.7-4.el6op |
ruby193-rubygem-rest-clientRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.6.1-2.el6op | 0:1.6.1-2.el6op |
ruby193-rubygem-ruby2rubyRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.3.1-2.el6op | 0:1.3.1-2.el6op |
ruby193-rubygem-ruby_parserRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.3.1-3.el6op | 0:2.3.1-3.el6op |
ruby193-rubygem-safe_yamlRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.9.1-1.el6op | 0:0.9.1-1.el6op |
ruby193-rubygem-sass-twitter-bootstrapRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.0.1-1.el6op | 0:2.0.1-1.el6op |
ruby193-rubygem-sexp_processorRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.2.0-2.el6op | 0:3.2.0-2.el6op |
ruby193-rubygem-spruzRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.2.5-5.el6op | 0:0.2.5-5.el6op |
ruby193-rubygem-state_machineRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.1.2-7.el6op | 0:1.1.2-7.el6op |
ruby193-rubygem-stompRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.2.14-1.el6op | 0:1.2.14-1.el6op |
ruby193-rubygem-syslog-loggerRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.6.8-1.el6op | 0:1.6.8-1.el6op |
ruby193-rubygem-systemuRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.5.2-2.el6op | 0:2.5.2-2.el6op |
ruby193-rubygem-term-ansicolorRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0.7-2.el6op | 0:1.0.7-2.el6op |
ruby193-rubygem-xml-simpleRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0.12-10.el6op | 0:1.0.12-10.el6op |
rubygem-ParseTreeRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.0.5-2.el6op | 0:3.0.5-2.el6op |
rubygem-RubyInlineRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.8.4-3.el6op | 0:3.8.4-3.el6op |
rubygem-ZenTestRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:4.3.3-1.el6op | 0:4.3.3-1.el6op |
rubygem-bsonRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.8.3-1.el6op | 0:1.8.3-1.el6op |
rubygem-bson_extRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.8.3-1.el6op | 0:1.8.3-1.el6op |
rubygem-bson_ext-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.8.3-1.el6op | 0:1.8.3-1.el6op |
rubygem-bundlerRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0.21-3.el6op | 0:1.0.21-3.el6op |
rubygem-diff-lcsRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.1.2-5.el6op | 0:1.1.2-5.el6op |
rubygem-fastthreadRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0.7-4.el6op | 0:1.0.7-4.el6op |
rubygem-file-tailRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0.5-4.el6op | 0:1.0.5-4.el6op |
rubygem-jsonRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.7.3-2.el6op | 0:1.7.3-2.el6op |
rubygem-json-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.7.3-2.el6op | 0:1.7.3-2.el6op |
rubygem-openshift-origin-admin-consoleRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.26.2.0-1.el6op | 0:1.26.2.0-1.el6op |
rubygem-openshift-origin-auth-remote-userRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.21.1.0-1.el6op | 0:1.21.1.0-1.el6op |
rubygem-openshift-origin-commonRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.28.3.0-1.el6op | 0:1.28.3.0-1.el6op |
rubygem-openshift-origin-consoleRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.31.3.1-1.el6op | 0:1.31.3.1-1.el6op |
rubygem-openshift-origin-controllerRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.31.5.1-1.el6op | 0:1.31.5.1-1.el6op |
rubygem-openshift-origin-dns-dynectRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.13.1.0-1.el6op | 0:1.13.1.0-1.el6op |
rubygem-openshift-origin-dns-fogRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0.1.0-1.el6op | 0:1.0.1.0-1.el6op |
rubygem-openshift-origin-dns-nsupdateRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.16.3.0-1.el6op | 0:1.16.3.0-1.el6op |
rubygem-openshift-origin-gear-placementRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.0.2.0-1.el6op | 0:0.0.2.0-1.el6op |
rubygem-openshift-origin-msg-broker-mcollectiveRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.30.2.2-1.el6op | 0:1.30.2.2-1.el6op |
rubygem-openshift-origin-routing-activemqRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.6.1.0-1.el6op | 0:0.6.1.0-1.el6op |
rubygem-openshift-origin-routing-daemonRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.17.1.4-1.el6op | 0:0.17.1.4-1.el6op |
rubygem-passengerRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.0.21-12.el6op | 0:3.0.21-12.el6op |
rubygem-passenger-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.0.21-12.el6op | 0:3.0.21-12.el6op |
rubygem-passenger-develRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.0.21-12.el6op | 0:3.0.21-12.el6op |
rubygem-passenger-nativeRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.0.21-12.el6op | 0:3.0.21-12.el6op |
rubygem-passenger-native-libsRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.0.21-12.el6op | 0:3.0.21-12.el6op |
rubygem-rackRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 1:1.3.0-4.el6op | 1:1.3.0-4.el6op |
rubygem-rakeRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.8.7-2.1.el6 | 0:0.8.7-2.1.el6 |
rubygem-reginRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.3.7-4.el6op | 0:0.3.7-4.el6op |
rubygem-ruby2rubyRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.2.4-3.el6op | 0:1.2.4-3.el6op |
rubygem-ruby_parserRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.0.4-6.el6op | 0:2.0.4-6.el6op |
rubygem-sexp_processorRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.0.4-2.el6op | 0:3.0.4-2.el6op |
rubygem-spruzRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.2.5-4.el6op | 0:0.2.5-4.el6op |
rubygem-stompRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.1.8-1.el6op | 0:1.1.8-1.el6op |
rubygem-systemuRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.2.0-3.el6op | 0:1.2.0-3.el6op |
rubygem-thorRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.14.6-2.el6op | 0:0.14.6-2.el6op |
rubygem-thread-dumpRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.0.5-93.el6op | 0:0.0.5-93.el6op |
rubygem-thread-dump-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:0.0.5-93.el6op | 0:0.0.5-93.el6op |
v8Red Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 1:3.14.5.10-2.el6op | 1:3.14.5.10-2.el6op |
v8-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 1:3.14.5.10-2.el6op | 1:3.14.5.10-2.el6op |
v8-develRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 1:3.14.5.10-2.el6op | 1:3.14.5.10-2.el6op |
yum-plugin-prioritiesRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.1.30-17.el6_5 | 0:1.1.30-17.el6_5 |
yum-utilsRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.1.30-17.el6_5 | 0:1.1.30-17.el6_5 |
openshift-origin-cartridge-dependencies-optional-jbosseapRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.27.1.0-1.el6op | 0:1.27.1.0-1.el6op |
openshift-origin-cartridge-dependencies-recommended-jbosseapRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.27.1.0-1.el6op | 0:1.27.1.0-1.el6op |
openshift-origin-cartridge-jbosseapRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:2.21.1.0-1.el6op | 0:2.21.1.0-1.el6op |
CharLSRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0-1.el6op | 0:1.0-1.el6op |
CharLS-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0-1.el6op | 0:1.0-1.el6op |
CharLS-develRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0-1.el6op | 0:1.0-1.el6op |
ImageMagickRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:6.5.4.7-7.el6_5 | 0:6.5.4.7-7.el6_5 |
ImageMagick-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:6.5.4.7-7.el6_5 | 0:6.5.4.7-7.el6_5 |
ImageMagick-develRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:6.5.4.7-7.el6_5 | 0:6.5.4.7-7.el6_5 |
ImageMagick-docRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:6.5.4.7-7.el6_5 | 0:6.5.4.7-7.el6_5 |
ImageMagick-perlRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:6.5.4.7-7.el6_5 | 0:6.5.4.7-7.el6_5 |
armadilloRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.800.2-1.el6op | 0:3.800.2-1.el6op |
armadillo-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.800.2-1.el6op | 0:3.800.2-1.el6op |
armadillo-develRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.800.2-1.el6op | 0:3.800.2-1.el6op |
atlasRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.8.4-2.el6 | 0:3.8.4-2.el6 |
atlas-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.8.4-2.el6 | 0:3.8.4-2.el6 |
atlas-develRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.8.4-2.el6 | 0:3.8.4-2.el6 |
blas-develRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.2.1-4.el6 | 0:3.2.1-4.el6 |
cfitsioRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.240-3.el6op | 0:3.240-3.el6op |
cfitsio-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.240-3.el6op | 0:3.240-3.el6op |
cfitsio-develRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.240-3.el6op | 0:3.240-3.el6op |
cfitsio-docsRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.240-3.el6op | 0:3.240-3.el6op |
cfitsio-staticRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:3.240-3.el6op | 0:3.240-3.el6op |
facterRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.6.6-1.el6op | 0:1.6.6-1.el6op |
freexlRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0.0d-1.el6op | 0:1.0.0d-1.el6op |
freexl-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0.0d-1.el6op | 0:1.0.0d-1.el6op |
freexl-develRed Hat:openshift:2.0::el6 From an advisory covering 2 CVEs |
before 0:1.0.0d-1.el6op | 0:1.0.0d-1.el6op |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-3674 is a high vulnerability (CVSS 7.5) in Redhat Openshift, published November 13, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.06%, the 81st percentile. No source names a fixed version.
References
rhn.redhat.com/errata/RHSA-2014-1906.html
rhn.redhat.com/errata/RHSA-2014-1796.html
nvd.nist.gov/vuln/detail/CVE-2014-3674
access.redhat.com/errata/RHSA-2014:1796
access.redhat.com/errata/RHSA-2014:1906
access.redhat.com/security/cve/CVE-2014-3674
Show 45 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=1148170
github.com/advisories/GHSA-cwr8-rjvx-3529
access.redhat.com/security/updates/classification
access.redhat.com/site/documentation/en-US/OpenShift_Enterprise/2
bugzilla.redhat.com/show_bug.cgi?id=1004479
bugzilla.redhat.com/show_bug.cgi?id=1093192
bugzilla.redhat.com/show_bug.cgi?id=1100102
bugzilla.redhat.com/show_bug.cgi?id=1121195
bugzilla.redhat.com/show_bug.cgi?id=1123850
bugzilla.redhat.com/show_bug.cgi?id=1130347
bugzilla.redhat.com/show_bug.cgi?id=1131167
bugzilla.redhat.com/show_bug.cgi?id=1131190
bugzilla.redhat.com/show_bug.cgi?id=1131680
bugzilla.redhat.com/show_bug.cgi?id=1133075
bugzilla.redhat.com/show_bug.cgi?id=1134139
bugzilla.redhat.com/show_bug.cgi?id=1140289
bugzilla.redhat.com/show_bug.cgi?id=1144057
bugzilla.redhat.com/show_bug.cgi?id=1144940
bugzilla.redhat.com/show_bug.cgi?id=1145810
bugzilla.redhat.com/show_bug.cgi?id=1145877
bugzilla.redhat.com/show_bug.cgi?id=1146224
bugzilla.redhat.com/show_bug.cgi?id=1148192
bugzilla.redhat.com/show_bug.cgi?id=1150971
bugzilla.redhat.com/show_bug.cgi?id=1151244
bugzilla.redhat.com/show_bug.cgi?id=1152698
bugzilla.redhat.com/show_bug.cgi?id=1152699
bugzilla.redhat.com/show_bug.cgi?id=1152700
bugzilla.redhat.com/show_bug.cgi?id=1153750
bugzilla.redhat.com/show_bug.cgi?id=1154026
bugzilla.redhat.com/show_bug.cgi?id=1154471
bugzilla.redhat.com/show_bug.cgi?id=1156200
bugzilla.redhat.com/show_bug.cgi?id=1156613
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1796.json
access.redhat.com/security/cve/CVE-2014-3602
cve.org/CVERecord?id=CVE-2014-3602
nvd.nist.gov/vuln/detail/CVE-2014-3602
cve.org/CVERecord?id=CVE-2014-3674
access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/Technical_Notes/index.html
access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.1_Release_Notes/index.html
bugzilla.redhat.com/show_bug.cgi?id=1143991
bugzilla.redhat.com/show_bug.cgi?id=1149837
bugzilla.redhat.com/show_bug.cgi?id=1153319
bugzilla.redhat.com/show_bug.cgi?id=1155794
bugzilla.redhat.com/show_bug.cgi?id=1163502
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1906.json
Also not on the record: 297 package claims. ID and package lookups still check them.