CVE-2014-3674
published 2014-11-13CVE-2014-3674: Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary…
PriorityP347high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.02%
78.8th percentile
Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | openshift | <= 2.1.8 | — |
| redhat | openshift | — | — |
| redhat | openshift | — | — |
| redhat | openshift | — | — |
| redhat | openshift | — | — |
| redhat | openshift | — | — |
| redhat | openshift | — | — |
| redhat | openshift | — | — |
| redhat | openshift | — | — |
| redhat | openshift | — | — |
| redhat | openshift | — | — |
| redhat | openshift | — | — |
| redhat | openshift | — | — |
| redhat | openshift | — | — |
| redhat | openshift | — | — |
| redhat | openshift | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
Enterprise: gears fail to properly isolate network traffic
vendor_redhat·2014-11-03·CVSS 7.5
CVE-2014-3674 [HIGH] CWE-284 Enterprise: gears fail to properly isolate network traffic
Enterprise: gears fail to properly isolate network traffic
Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors.
It was found that OpenShift Enterprise 2.1 did not properly restrict access to services running on different gears. This could allow an attacker to access unprotected network resources running in another user's gear.
GHSA
GHSA-cwr8-rjvx-3529: Red Hat OpenShift Enterprise before 2
ghsa_unreviewed·2022-05-13
CVE-2014-3674 [HIGH] GHSA-cwr8-rjvx-3529: Red Hat OpenShift Enterprise before 2
Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors.
No detection rules found.
No public exploits indexed.
2014-11-13
Published