Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Red Hat OpenShift Enterprise allows unauthorized access to containers

CVE-2014-3674 · published 11 years ago
Summary

Versions of Red Hat OpenShift Enterprise earlier than 2.2 let anyone on the network reach the internal resources of any container (called a gear). This could let attackers view or interfere with applications running inside those containers. Upgrade to the latest version of OpenShift Enterprise or apply the official security patch to close the gap.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
redhat openshift <= 2.1.8
2.0
2.0.1
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.1
2.1.1
2.1.2
2.1.3
4 more version ranges
cpe:2.3:a:redhat:openshift:*:*:*:*:enterprise:*:*:*
Original advisory text
Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors.
Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
2% chance of attack within 30 days
Type
CWE-264Permissions, Privileges, and Access Controls
Timeline
Published13 Nov 2014
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2014-3674 · NVD
Track software like this
Free during beta