{"id":"CVE-2014-0164","aliases":["DEBIAN-CVE-2014-0164","EUVD-2014-0219","GHSA-qrc5-rp7w-h34q","RHSA-2014:0460","RHSA-2014:0461"],"status":"published","title":"openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world...","description":"openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0038,"percentile":0.32231,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-310"],"published":"2014-05-05T17:00:00Z","modified":"2026-10-23T15:47:32Z","fixes":[{"ecosystem":"Debian:12","package":"mcollective","fixed_in":["1.2.1+dfsg-2"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-broker-util","fixed_in":["0:1.17.6.6-1.el6op"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:1.2::el6","package":"openshift-origin-broker-util","fixed_in":["0:1.9.16-1.el6op"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"mcollective","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1+dfsg-2"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-broker-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.6.6-1.el6op"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:1.2::el6","package":"openshift-origin-broker-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.16-1.el6op"}]}]}],"products":[{"vendor":"redhat","product":"openshift"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2014-0461.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0460.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0164","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0460","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0461","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0164","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083847","tags":["report"]},{"url":"https://github.com/advisories/GHSA-qrc5-rp7w-h34q"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-0164","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0460.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0164","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0461.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2014-0164","description":"openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file.","status":"published","published":"2014-05-05T17:00:00Z","modified":"2024-08-06T09:05:39.151Z","updated_at":"2026-11-02T14:33:46.955592Z"}],"euvd":[{"id":"EUVD-2014-0219","description":"openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file.","status":"published","published":"2014-05-05T17:00:00Z","modified":"2024-08-06T09:05:39Z","updated_at":"2026-11-03T01:57:22.468358Z"}],"ghsa":[{"id":"GHSA-qrc5-rp7w-h34q","title":"openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world...","description":"openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file.","status":"published","published":"2022-05-17T04:41:01Z","modified":"2023-02-10T05:06:44Z","updated_at":"2026-11-02T14:54:02.847747Z"}],"nvd":[{"id":"CVE-2014-0164","description":"openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file.","status":"published","published":"2014-05-05T17:06:05.607Z","modified":"2026-06-17T00:02:25.3Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:02:54.082915Z"}],"osv":[{"id":"CVE-2014-0164","description":"openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file.","status":"published","published":"2014-05-05T17:06:05Z","modified":"2026-04-10T03:43:31.656326Z","updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2014-0164","description":"openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file.","status":"published","published":"2014-05-05T17:06:05.607Z","modified":"2026-10-23T15:47:32.205240146Z","updated_at":"2026-11-02T15:45:25.819707Z"},{"id":"RHSA-2014:0460","title":"Red Hat Security Advisory: openshift-origin-broker-util security update","status":"published","published":"2024-09-13T08:52:49Z","modified":"2025-11-22T10:50:42Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:0461","title":"Red Hat Security Advisory: openshift-origin-broker-util security update","status":"published","published":"2024-09-13T08:52:54Z","modified":"2025-11-22T10:50:42Z","updated_at":"2026-11-02T15:53:02.532052Z"}]}}