CVE-2014-0233
Red Hat OpenShift Enterprise 2.0 and 2.1 and OpenShift Origin allow remote authenticated users to...
CVE-2014-0233 is a medium vulnerability (CVSS 6.5) in Redhat Openshift, published November 16, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.72%, the 77th percentile. Fixed in rubygem-openshift-origin-node 0:1.17.5.16-1.el6op.
- Severity
- 6.5 MediumCVSS 2.0, NVD
- Exploit chance
- 1.72%EPSS, 77th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0:1.17.5.16-1.el6oprubygem-openshift-origin-node +1 more
Description
Red Hat OpenShift Enterprise 2.0 and 2.1 and OpenShift Origin allow remote authenticated users to execute arbitrary commands via shell metacharacters in a directory name that is referenced by a cartridge using the file: URI scheme.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rubygem-openshift-origin-nodeRed Hat:openshift:2.0::el6 | before 0:1.17.5.16-1.el6op | 0:1.17.5.16-1.el6op |
rubygem-openshift-origin-nodeRed Hat:openshift:2.0::el6 | before 0:1.23.9.4-1.el6op | 0:1.23.9.4-1.el6op |
What each source reports
NVD Score used
Red Hat OpenShift Enterprise 2.0 and 2.1 and OpenShift Origin allow remote authenticated users to execute arbitrary commands via shell metacharacters in a directory name that is referenced by a cartridge using the file: URI scheme.
- Record
CVE-2014-0233- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE ListNo score
Red Hat OpenShift Enterprise 2.0 and 2.1 and OpenShift Origin allow remote authenticated users to execute arbitrary commands via shell metacharacters in a directory name that is referenced by a cartridge using the file: URI scheme.
- Record
CVE-2014-0233- Updated
- 2026-11-02
EUVDEUVD-2014-0271No score
Red Hat OpenShift Enterprise 2.0 and 2.1 and OpenShift Origin allow remote authenticated users to execute arbitrary commands via shell metacharacters in a directory name that is referenced by a cartridge using the file: URI scheme.
- Record
EUVD-2014-0271- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-frgq-r6cx-mg8wNo score
Red Hat OpenShift Enterprise 2.0 and 2.1 and OpenShift Origin allow remote authenticated users to...
Red Hat OpenShift Enterprise 2.0 and 2.1 and OpenShift Origin allow remote authenticated users to execute arbitrary commands via shell metacharacters in a directory name that is referenced by a cartridge using the file: URI scheme.
- Record
GHSA-frgq-r6cx-mg8w- Weakness
- CWE-94
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
rhn.redhat.com/errata/RHSA-2014-0530.html
bugzilla.redhat.com/show_bug.cgi?id=1096955
nvd.nist.gov/vuln/detail/CVE-2014-0233
access.redhat.com/errata/RHSA-2014:0529
Show 6 moreShow less
github.com/advisories/GHSA-frgq-r6cx-mg8w
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0529.json
cve.org/CVERecord?id=CVE-2014-0233