rubygem-openshift-origin-auth-remote-user vulnerabilities (Red Hat)
29 vulnerabilities.
-
rubygem-openshift-origin-auth-remote-userRed Hat The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a... 9.8 Critical -
rubygem-openshift-origin-auth-remote-userRed Hat A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic... 6.5 Medium -
rubygem-openshift-origin-auth-remote-userRed Hat mcollective has a default password set at install 9.8 Critical -
rubygem-openshift-origin-auth-remote-userRed Hat openshift-origin-node Improper Input Validation vulnerability 5.5 Medium -
rubygem-openshift-origin-auth-remote-userRed Hat Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows... 7.5 High -
rubygem-openshift-origin-auth-remote-userRed Hat Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number... 2.1 Low -
rubygem-openshift-origin-auth-remote-userRed Hat The openshift-origin-broker in Red Hat OpenShift Enterprise 2.0.5, 1.2.7, and earlier does not... 7.5 High -
rubygem-openshift-origin-auth-remote-userRed Hat Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068... 5.0 Medium -
rubygem-openshift-origin-auth-remote-userRed Hat Ruby 1.9.3 before patchlevel 286 and 2.0 before revision r37068 allows context-dependent... 5.0 Medium -
rubygem-openshift-origin-auth-remote-userRed Hat ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name 2.1 Low -
rubygem-openshift-origin-auth-remote-userRed Hat The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin... 3.6 Low -
rubygem-openshift-origin-auth-remote-userRed Hat Jenkins allows attackers to obtain the master cryptographic key 2.6 Low -
rubygem-openshift-origin-auth-remote-userRed Hat Jenkins allows Cross-Site Scripting (XSS) 3.5 Low -
rubygem-openshift-origin-auth-remote-userRed Hat Jenkins affected by Open Redirect Vulnerability 5.8 Medium -
rubygem-openshift-origin-auth-remote-userRed Hat Jenkins allows HTTP Injection and Response Splitting 4.3 Medium -
rubygem-openshift-origin-auth-remote-userRed Hat rhc-chk.rb in Red Hat OpenShift Origin before 1.1, when -d (debug mode) is used, outputs the... 2.1 Low -
rubygem-openshift-origin-auth-remote-userRed Hat ActiveRecord vulnerable to modification of protected model attributes 4.3 Medium -
rubygem-openshift-origin-auth-remote-userRed Hat Active Record allows bypassing of database-query restrictions 6.4 Medium -
rubygem-openshift-origin-auth-remote-userRed Hat Active Record contains SQL Injection 7.5 High -
rubygem-openshift-origin-auth-remote-userRed Hat Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without... 5.0 Medium -
rubygem-openshift-origin-auth-remote-userRed Hat The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0... 5.0 Medium -
rubygem-openshift-origin-auth-remote-userRed Hat actionpack Cross-site Scripting vulnerability 4.3 Medium -
rubygem-openshift-origin-auth-remote-userRed Hat activesupport Cross-site Scripting vulnerability 4.3 Medium -
rubygem-openshift-origin-auth-remote-userRed Hat actionpack Cross-site Scripting vulnerability 4.3 Medium -
rubygem-openshift-origin-auth-remote-userRed Hat actionpack Improper Authentication vulnerability 5.0 Medium -
rubygem-openshift-origin-auth-remote-userRed Hat activerecord vulnerable to SQL Injection 7.5 High -
rubygem-openshift-origin-auth-remote-userRed Hat actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request 4.3 Medium -
rubygem-openshift-origin-auth-remote-userRed Hat Active Record vulnerable to SQL Injection via nested query parameters 5.0 Medium -
rubygem-openshift-origin-auth-remote-userRed Hat Action Pack contains database-query restrictions bypass 6.4 Medium