CVE-2014-0234
The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a...
9.8 Critical
The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this may overlap CVE-2013-4253 and CVE-2013-4281.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
3.79%Up 2.6 points since Feb 4, 2022
What each source reports
NVD Score used
The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this may overlap CVE-2013-4253 and CVE-2013-4281.
- Record
CVE-2014-0234- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-1188
- Updated
- 2026-11-02
CVE List No score
The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this may overlap CVE-2013-4253 and CVE-2013-4281.
- Record
CVE-2014-0234- Updated
- 2026-11-02
EUVDEUVD-2014-0272 No score
The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this may overlap CVE-2013-4253 and CVE-2013-4281.
- Record
EUVD-2014-0272- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w87g-2vqm-6m24
The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a...
The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this may overlap CVE-2013-4253 and CVE-2013-4281.
- Record
GHSA-w87g-2vqm-6m24- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-1188
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rhcRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.23.7.1-1.el6op | 0:1.23.7.1-1.el6op |
rubygem-archive-tar-minitarRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.5.2-3.1.el6op | 0:0.5.2-3.1.el6op |
rubygem-commanderRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:4.0.3-4.el6op | 0:4.0.3-4.el6op |
rubygem-highlineRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.6.16-1.el6op | 0:1.6.16-1.el6op |
rubygem-httpclientRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.3.2-1.el6op | 0:2.3.2-1.el6op |
rubygem-net-scpRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.1.2-2.el6op | 0:1.1.2-2.el6op |
rubygem-net-sshRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.7.0-1.el6op | 0:2.7.0-1.el6op |
rubygem-net-ssh-gatewayRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.2.0-1.el6op | 0:1.2.0-1.el6op |
rubygem-net-ssh-multiRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.2.0-1.el6op | 0:1.2.0-1.el6op |
rubygem-open4Red Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.3.0-2.el6op | 0:1.3.0-2.el6op |
Show 190 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rubygem-parseconfigRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.5.2-5.el6op | 0:0.5.2-5.el6op |
rubygem-test-unitRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.2.0-3.el6op | 0:2.2.0-3.el6op |
rubygemsRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.8.24-6.el6op | 0:1.8.24-6.el6op |
rubygems-develRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.8.24-6.el6op | 0:1.8.24-6.el6op |
activemqRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:5.9.0-5.redhat.610328.el6op | 0:5.9.0-5.redhat.610328.el6op |
activemq-clientRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:5.9.0-5.redhat.610328.el6op | 0:5.9.0-5.redhat.610328.el6op |
jsRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.70-12.el6op | 0:1.70-12.el6op |
js-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.70-12.el6op | 0:1.70-12.el6op |
js-develRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.70-12.el6op | 0:1.70-12.el6op |
json-cRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.10-3.el6op | 0:0.10-3.el6op |
json-c-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.10-3.el6op | 0:0.10-3.el6op |
json-c-develRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.10-3.el6op | 0:0.10-3.el6op |
json-c-docRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.10-3.el6op | 0:0.10-3.el6op |
libestrRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.1.5-1.el6op | 0:0.1.5-1.el6op |
libestr-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.1.5-1.el6op | 0:0.1.5-1.el6op |
libestr-develRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.1.5-1.el6op | 0:0.1.5-1.el6op |
libevRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:4.04-4.el6op | 0:4.04-4.el6op |
libev-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:4.04-4.el6op | 0:4.04-4.el6op |
libev-develRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:4.04-4.el6op | 0:4.04-4.el6op |
libmongodbRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.4.6-2.el6op | 0:2.4.6-2.el6op |
mod_passengerRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.0.21-9.el6op | 0:3.0.21-9.el6op |
mongodbRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.4.6-2.el6op | 0:2.4.6-2.el6op |
mongodb-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.4.6-2.el6op | 0:2.4.6-2.el6op |
mongodb-serverRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.4.6-2.el6op | 0:2.4.6-2.el6op |
openshift-enterprise-releaseRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.1.0-1.el6op | 0:2.1.0-1.el6op |
openshift-enterprise-upgradeRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.1.0-1.el6op | 0:2.1.0-1.el6op |
openshift-enterprise-upgrade-brokerRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.1.0-1.el6op | 0:2.1.0-1.el6op |
openshift-enterprise-yum-validatorRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.1.0-1.el6op | 0:2.1.0-1.el6op |
openshift-origin-brokerRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.16.1.3-1.el6op | 0:1.16.1.3-1.el6op |
openshift-origin-broker-utilRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.23.8.1-1.el6op | 0:1.23.8.1-1.el6op |
openshift-origin-consoleRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.16.2.3-1.el6op | 0:1.16.2.3-1.el6op |
openshift-origin-logshifterRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.5.2-1.el6op | 0:1.5.2-1.el6op |
openshift-origin-msg-commonRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.19.2-1.el6op | 0:1.19.2-1.el6op |
openshift-origin-util-sclRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.17.1-1.el6op | 0:1.17.1-1.el6op |
rsyslog7Red Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:7.4.7-5.4.el6op | 0:7.4.7-5.4.el6op |
rsyslog7-cryptoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:7.4.7-5.4.el6op | 0:7.4.7-5.4.el6op |
rsyslog7-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:7.4.7-5.4.el6op | 0:7.4.7-5.4.el6op |
rsyslog7-gnutlsRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:7.4.7-5.4.el6op | 0:7.4.7-5.4.el6op |
rsyslog7-libdbiRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:7.4.7-5.4.el6op | 0:7.4.7-5.4.el6op |
rsyslog7-mmjsonparseRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:7.4.7-5.4.el6op | 0:7.4.7-5.4.el6op |
rsyslog7-mmopenshiftRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:7.4.7-5.4.el6op | 0:7.4.7-5.4.el6op |
rsyslog7-mysqlRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:7.4.7-5.4.el6op | 0:7.4.7-5.4.el6op |
rsyslog7-pgsqlRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:7.4.7-5.4.el6op | 0:7.4.7-5.4.el6op |
rsyslog7-snmpRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:7.4.7-5.4.el6op | 0:7.4.7-5.4.el6op |
ruby-RMagickRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.13.1-6.el6op.1 | 0:2.13.1-6.el6op.1 |
ruby-RMagick-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.13.1-6.el6op.1 | 0:2.13.1-6.el6op.1 |
ruby193-jsRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 1:1.8.5-10.el6op | 1:1.8.5-10.el6op |
ruby193-js-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 1:1.8.5-10.el6op | 1:1.8.5-10.el6op |
ruby193-js-develRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 1:1.8.5-10.el6op | 1:1.8.5-10.el6op |
ruby193-mcollectiveRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.4.1-5.el6op | 0:2.4.1-5.el6op |
ruby193-mcollective-clientRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.4.1-5.el6op | 0:2.4.1-5.el6op |
ruby193-mcollective-commonRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.4.1-5.el6op | 0:2.4.1-5.el6op |
ruby193-mod_passengerRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.0.21-3.el6op | 0:3.0.21-3.el6op |
ruby193-ruby-mysqlRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.8.2-8.el6op | 0:2.8.2-8.el6op |
ruby193-ruby-mysql-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.8.2-8.el6op | 0:2.8.2-8.el6op |
ruby193-ruby-wrapperRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.0.2-2.el6op | 0:0.0.2-2.el6op |
ruby193-rubygem-bsonRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.8.1-1.el6op | 0:1.8.1-1.el6op |
ruby193-rubygem-bson_extRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.8.1-2.el6op | 0:1.8.1-2.el6op |
ruby193-rubygem-bson_ext-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.8.1-2.el6op | 0:1.8.1-2.el6op |
ruby193-rubygem-chunky_pngRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.2.6-3.el6op | 0:1.2.6-3.el6op |
ruby193-rubygem-compassRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.12.2-4.el6op | 0:0.12.2-4.el6op |
ruby193-rubygem-compass-railsRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.0.3-2.el6op | 0:1.0.3-2.el6op |
ruby193-rubygem-daemon_controllerRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.1.0-1.el6op | 0:1.1.0-1.el6op |
ruby193-rubygem-dnsrubyRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.53-3.el6op | 0:1.53-3.el6op |
ruby193-rubygem-fastthreadRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.0.7-7.el6op | 0:1.0.7-7.el6op |
ruby193-rubygem-fastthread-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.0.7-7.el6op | 0:1.0.7-7.el6op |
ruby193-rubygem-file-tailRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.0.5-5.el6op | 0:1.0.5-5.el6op |
ruby193-rubygem-formtasticRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.2.4-2.el6op | 0:1.2.4-2.el6op |
ruby193-rubygem-fssmRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.2.8.1-2.el6op | 0:0.2.8.1-2.el6op |
ruby193-rubygem-hamlRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:4.0.3-2.el6op | 0:4.0.3-2.el6op |
ruby193-rubygem-httpclientRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.3.4.1-1.el6op | 0:2.3.4.1-1.el6op |
ruby193-rubygem-jquery-railsRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.1.0-1.el6op | 0:3.1.0-1.el6op |
ruby193-rubygem-jsonRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.7.3-5.el6op | 0:1.7.3-5.el6op |
ruby193-rubygem-json-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.7.3-5.el6op | 0:1.7.3-5.el6op |
ruby193-rubygem-json_pureRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.7.3-1.el6 | 0:1.7.3-1.el6 |
ruby193-rubygem-minitestRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.5.0-3.el6op | 0:3.5.0-3.el6op |
ruby193-rubygem-mongoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.8.1-1.el6op | 0:1.8.1-1.el6op |
ruby193-rubygem-mongoidRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.1.4-2.el6op | 0:3.1.4-2.el6op |
ruby193-rubygem-mopedRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.5.0-2.el6op | 0:1.5.0-2.el6op |
ruby193-rubygem-net-ldapRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.3.1-1.el6op | 0:0.3.1-1.el6op |
ruby193-rubygem-net-ldap-docRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.3.1-1.el6op | 0:0.3.1-1.el6op |
ruby193-rubygem-open4Red Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.3.0-3.el6op | 0:1.3.0-3.el6op |
ruby193-rubygem-originRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.0.7-2.el6op | 0:1.0.7-2.el6op |
ruby193-rubygem-parseconfigRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.0.2-1.el6op | 0:1.0.2-1.el6op |
ruby193-rubygem-passengerRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.0.21-3.el6op | 0:3.0.21-3.el6op |
ruby193-rubygem-passenger-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.0.21-3.el6op | 0:3.0.21-3.el6op |
ruby193-rubygem-passenger-develRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.0.21-3.el6op | 0:3.0.21-3.el6op |
ruby193-rubygem-passenger-nativeRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.0.21-3.el6op | 0:3.0.21-3.el6op |
ruby193-rubygem-passenger-native-libsRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.0.21-3.el6op | 0:3.0.21-3.el6op |
ruby193-rubygem-pgRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.12.2-4.el6op | 0:0.12.2-4.el6op |
ruby193-rubygem-pg-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.12.2-4.el6op | 0:0.12.2-4.el6op |
ruby193-rubygem-rdiscountRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.6.8-3.el6op | 0:1.6.8-3.el6op |
ruby193-rubygem-rdiscount-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.6.8-3.el6op | 0:1.6.8-3.el6op |
ruby193-rubygem-reginRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.3.7-4.el6op | 0:0.3.7-4.el6op |
ruby193-rubygem-rest-clientRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.6.1-2.el6op | 0:1.6.1-2.el6op |
ruby193-rubygem-ruby2rubyRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.3.1-2.el6op | 0:1.3.1-2.el6op |
ruby193-rubygem-ruby_parserRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.3.1-3.el6op | 0:2.3.1-3.el6op |
ruby193-rubygem-safe_yamlRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.9.1-1.el6op | 0:0.9.1-1.el6op |
ruby193-rubygem-sass-twitter-bootstrapRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.0.1-1.el6op | 0:2.0.1-1.el6op |
ruby193-rubygem-sexp_processorRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.2.0-2.el6op | 0:3.2.0-2.el6op |
ruby193-rubygem-spruzRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.2.5-5.el6op | 0:0.2.5-5.el6op |
ruby193-rubygem-state_machineRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.1.2-7.el6op | 0:1.1.2-7.el6op |
ruby193-rubygem-stompRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.2.14-1.el6op | 0:1.2.14-1.el6op |
ruby193-rubygem-syslog-loggerRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.6.8-1.el6op | 0:1.6.8-1.el6op |
ruby193-rubygem-systemuRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.5.2-2.el6op | 0:2.5.2-2.el6op |
ruby193-rubygem-term-ansicolorRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.0.7-2.el6op | 0:1.0.7-2.el6op |
ruby193-rubygem-xml-simpleRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.0.12-10.el6op | 0:1.0.12-10.el6op |
rubygem-ParseTreeRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.0.5-2.el6op | 0:3.0.5-2.el6op |
rubygem-RubyInlineRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.8.4-3.el6op | 0:3.8.4-3.el6op |
rubygem-ZenTestRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:4.3.3-1.el6op | 0:4.3.3-1.el6op |
rubygem-bsonRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.8.3-1.el6op | 0:1.8.3-1.el6op |
rubygem-bson_extRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.8.3-1.el6op | 0:1.8.3-1.el6op |
rubygem-bson_ext-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.8.3-1.el6op | 0:1.8.3-1.el6op |
rubygem-bundlerRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.0.21-3.el6op | 0:1.0.21-3.el6op |
rubygem-diff-lcsRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.1.2-5.el6op | 0:1.1.2-5.el6op |
rubygem-fastthreadRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.0.7-4.el6op | 0:1.0.7-4.el6op |
rubygem-file-tailRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.0.5-4.el6op | 0:1.0.5-4.el6op |
rubygem-jsonRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.7.3-2.el6op | 0:1.7.3-2.el6op |
rubygem-json-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.7.3-2.el6op | 0:1.7.3-2.el6op |
rubygem-openshift-origin-admin-consoleRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.20.2.1-1.el6op | 0:1.20.2.1-1.el6op |
rubygem-openshift-origin-auth-remote-userRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.19.6.2-1.el6op | 0:1.19.6.2-1.el6op |
rubygem-openshift-origin-commonRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.22.5.1-1.el6op | 0:1.22.5.1-1.el6op |
rubygem-openshift-origin-consoleRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.23.4.2-1.el6op | 0:1.23.4.2-1.el6op |
rubygem-openshift-origin-controllerRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.23.10.1-1.el6op | 0:1.23.10.1-1.el6op |
rubygem-openshift-origin-dns-nsupdateRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.16.2.1-1.el6op | 0:1.16.2.1-1.el6op |
rubygem-openshift-origin-msg-broker-mcollectiveRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.23.3.1-1.el6op | 0:1.23.3.1-1.el6op |
rubygem-openshift-origin-routing-activemqRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.4.1-1.el6op | 0:0.4.1-1.el6op |
rubygem-passengerRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.0.21-9.el6op | 0:3.0.21-9.el6op |
rubygem-passenger-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.0.21-9.el6op | 0:3.0.21-9.el6op |
rubygem-passenger-develRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.0.21-9.el6op | 0:3.0.21-9.el6op |
rubygem-passenger-nativeRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.0.21-9.el6op | 0:3.0.21-9.el6op |
rubygem-passenger-native-libsRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.0.21-9.el6op | 0:3.0.21-9.el6op |
rubygem-rackRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 1:1.3.0-4.el6op | 1:1.3.0-4.el6op |
rubygem-rakeRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.8.7-2.1.el6 | 0:0.8.7-2.1.el6 |
rubygem-reginRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.3.7-4.el6op | 0:0.3.7-4.el6op |
rubygem-ruby2rubyRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.2.4-3.el6op | 0:1.2.4-3.el6op |
rubygem-ruby_parserRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.0.4-6.el6op | 0:2.0.4-6.el6op |
rubygem-sexp_processorRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.0.4-2.el6op | 0:3.0.4-2.el6op |
rubygem-spruzRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.2.5-4.el6op | 0:0.2.5-4.el6op |
rubygem-stompRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.1.8-1.el6op | 0:1.1.8-1.el6op |
rubygem-systemuRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.2.0-3.el6op | 0:1.2.0-3.el6op |
rubygem-thorRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.14.6-2.el6op | 0:0.14.6-2.el6op |
rubygem-thread-dumpRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.0.5-93.el6op | 0:0.0.5-93.el6op |
rubygem-thread-dump-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:0.0.5-93.el6op | 0:0.0.5-93.el6op |
v8Red Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 1:3.14.5.10-2.el6op | 1:3.14.5.10-2.el6op |
v8-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 1:3.14.5.10-2.el6op | 1:3.14.5.10-2.el6op |
v8-develRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 1:3.14.5.10-2.el6op | 1:3.14.5.10-2.el6op |
yum-plugin-prioritiesRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.1.30-17.el6_5 | 0:1.1.30-17.el6_5 |
yum-utilsRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.1.30-17.el6_5 | 0:1.1.30-17.el6_5 |
openshift-origin-cartridge-dependencies-optional-jbosseapRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.23.3.1-1.el6op | 0:1.23.3.1-1.el6op |
openshift-origin-cartridge-dependencies-recommended-jbosseapRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.23.3.1-1.el6op | 0:1.23.3.1-1.el6op |
openshift-origin-cartridge-jbosseapRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.16.3.4-1.el6op | 0:2.16.3.4-1.el6op |
CharLSRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.0-1.el6op | 0:1.0-1.el6op |
CharLS-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.0-1.el6op | 0:1.0-1.el6op |
CharLS-develRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.0-1.el6op | 0:1.0-1.el6op |
ImageMagickRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:6.5.4.7-7.el6_5 | 0:6.5.4.7-7.el6_5 |
ImageMagick-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:6.5.4.7-7.el6_5 | 0:6.5.4.7-7.el6_5 |
ImageMagick-develRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:6.5.4.7-7.el6_5 | 0:6.5.4.7-7.el6_5 |
ImageMagick-docRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:6.5.4.7-7.el6_5 | 0:6.5.4.7-7.el6_5 |
ImageMagick-perlRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:6.5.4.7-7.el6_5 | 0:6.5.4.7-7.el6_5 |
armadilloRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.800.2-1.el6op | 0:3.800.2-1.el6op |
armadillo-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.800.2-1.el6op | 0:3.800.2-1.el6op |
armadillo-develRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.800.2-1.el6op | 0:3.800.2-1.el6op |
atlasRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.8.4-2.el6 | 0:3.8.4-2.el6 |
atlas-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.8.4-2.el6 | 0:3.8.4-2.el6 |
atlas-develRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.8.4-2.el6 | 0:3.8.4-2.el6 |
blas-develRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.2.1-4.el6 | 0:3.2.1-4.el6 |
cfitsioRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.240-3.el6op | 0:3.240-3.el6op |
cfitsio-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.240-3.el6op | 0:3.240-3.el6op |
cfitsio-develRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.240-3.el6op | 0:3.240-3.el6op |
cfitsio-docsRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.240-3.el6op | 0:3.240-3.el6op |
cfitsio-staticRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.240-3.el6op | 0:3.240-3.el6op |
facterRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.6.6-1.el6op | 0:1.6.6-1.el6op |
freexlRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.0.0d-1.el6op | 0:1.0.0d-1.el6op |
freexl-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.0.0d-1.el6op | 0:1.0.0d-1.el6op |
freexl-develRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.0.0d-1.el6op | 0:1.0.0d-1.el6op |
gdRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.0.35-11.el6 | 0:2.0.35-11.el6 |
gd-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.0.35-11.el6 | 0:2.0.35-11.el6 |
gd-develRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:2.0.35-11.el6 | 0:2.0.35-11.el6 |
gdalRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.9.2-8.el6op | 0:1.9.2-8.el6op |
gdal-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.9.2-8.el6op | 0:1.9.2-8.el6op |
gdal-develRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.9.2-8.el6op | 0:1.9.2-8.el6op |
gdal-docRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.9.2-8.el6op | 0:1.9.2-8.el6op |
gdal-javaRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.9.2-8.el6op | 0:1.9.2-8.el6op |
gdal-javadocRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.9.2-8.el6op | 0:1.9.2-8.el6op |
gdal-libsRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.9.2-8.el6op | 0:1.9.2-8.el6op |
gdal-perlRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.9.2-8.el6op | 0:1.9.2-8.el6op |
gdal-pythonRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.9.2-8.el6op | 0:1.9.2-8.el6op |
gdal-rubyRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:1.9.2-8.el6op | 0:1.9.2-8.el6op |
geosRed Hat:openshift:2.0::el6 From an advisory covering 3 CVEs |
before 0:3.3.2-1.el6op | 0:3.3.2-1.el6op |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-0234 is a critical vulnerability (CVSS 9.8) in Red Hat Openshift Enterprise, published February 12, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.79%, the 90th percentile. No source names a fixed version.
References
github.com/openshift/openshift-extras/blob/master/README.md
openwall.com/lists/oss-security/2014/06/05/19
bugzilla.redhat.com/show_bug.cgi?id=1097008
rhn.redhat.com/errata/RHSA-2014-0487.html
securityfocus.com/bid/67657
nvd.nist.gov/vuln/detail/CVE-2014-0234
Show 15 moreShow less
access.redhat.com/errata/RHBA-2014:0487
security.access.redhat.com/data/csaf/v2/advisories/2014/rhba-2014_0487.json
cve.org/CVERecord?id=CVE-2014-0084
This page doesn't list everything
Also not on the record: 252 package claims. ID and package lookups still check them.