CVE-2014-3602

Published: Nov 13, 2014Modified: May 6, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number information for remote systems by reading /proc/net/tcp.

Affected (16)

Products: Redhat: Openshift

Redhat

1 product

Openshift

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Redhat Openshift	Up to 2.1.8
Redhat Openshift	Version 2.0.1
Redhat Openshift	Version 2.0.2
Redhat Openshift	Version 2.0.3
Redhat Openshift	Version 2.0.4
Redhat Openshift	Version 2.0.5
Redhat Openshift	Version 2.0.6
Redhat Openshift	Version 2.0
Redhat Openshift	Version 2.1.1
Redhat Openshift	Version 2.1.2
Redhat Openshift	Version 2.1.3
Redhat Openshift	Version 2.1.4
Redhat Openshift	Version 2.1.5
Redhat Openshift	Version 2.1.6
Redhat Openshift	Version 2.1.7
Redhat Openshift	Version 2.1

Related CWEs

CWE-264

References (4)

http://rhn.redhat.com/errata/RHSA-2014-1796.html

Source: secalert@redhat.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2014-1906.html

Source: secalert@redhat.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2014-1796.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2014-1906.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.