The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this may overlap CVE-2013-4253 and CVE-2013-4281.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade ruby193-rubygem-mongoUpgrade libreadline-javaUpgrade libffiUpgrade ruby193-ruby-selinuxUpgrade ruby193-rubygem-highlineUpgrade nodejs010-nodejs-optimistUpgrade jsUpgrade ruby193-rubygem-dnsrubyUpgrade libwebpUpgrade libestrUpgrade ruby193-rubygem-parallelUpgrade cfitsioUpgrade rubygem-reginUpgrade openshift-origin-node-utilUpgrade nodejs010-nodejs-bsonUpgrade ruby193-rubygem-state_machineUpgrade openshift-origin-cartridge-mock-pluginUpgrade nodejs010-nodejs-supervisorUpgrade rhcUpgrade perl-Class-TriggerUpgrade armadilloUpgrade openshift-origin-cartridge-phpUpgrade ruby193-rubygem-net-ldapUpgrade nodejs010-nodejs-keypressUpgrade ruby193-rubygem-chunky_pngUpgrade rubygem-net-ssh-gatewayUpgrade ruby193-rubygem-mongoidUpgrade nodejs010-nodejs-pgUpgrade ruby193-rubygem-stompUpgrade openshift-origin-cartridge-jbosseapUpgrade perl-Class-Factory-UtilUpgrade activemqUpgrade perl-App-cpanminusUpgrade python27-mod_wsgiUpgrade python-virtualenvUpgrade facterUpgrade ruby193-rubygem-jsonUpgrade jasperUpgrade ruby193-rubygem-commanderUpgrade rubygem-thread-dumpUpgrade json-cUpgrade xerces-cUpgrade rubygem-bson_extUpgrade ruby193-rubygem-bson_extUpgrade perl-CloneUpgrade rubygem-rakeUpgrade nodejs010-nodejs-methodsUpgrade rubygem-RubyInlineUpgrade netcdfUpgrade libcgroupUpgrade yum-utilsUpgrade rubygem-commanderUpgrade rubygem-openshift-origin-container-selinuxUpgrade openshift-origin-brokerUpgrade rubygem-ZenTestUpgrade ruby193-jsUpgrade nodejs010-nodejs-freshUpgrade ruby193-rubygem-syslog-loggerUpgrade mongodbUpgrade ruby193-rubygem-ruby_parserUpgrade rubygem-ruby2rubyUpgrade rubygem-bsonUpgrade rubygem-openshift-origin-frontend-apache-mod-rewriteUpgrade ruby193-rubygem-originUpgrade CharLSUpgrade rubygem-openshift-origin-frontend-haproxy-sni-proxyUpgrade perl-DateTime-Format-StrptimeUpgrade openshift-origin-util-sclUpgrade rubygem-openshift-origin-frontend-nodejs-websocketUpgrade nodejs010-nodejs-cookie-signatureUpgrade openshift-enterprise-upgradeUpgrade ruby193-rubygem-file-tailUpgrade ruby193-rubygem-parseconfigUpgrade jenkinsUpgrade perl-IO-stringyUpgrade rubygem-net-sshUpgrade rubygem-fastthreadUpgrade openshift-origin-msg-commonUpgrade ruby193-rubygem-spruzUpgrade postgresql-ip4rUpgrade ruby193-rubygem-fssmUpgrade gdUpgrade ruby193-rubygem-rdiscountUpgrade openshift-origin-broker-utilUpgrade postgisUpgrade rubygem-net-scpUpgrade nodejs010-nodejs-colorsUpgrade nodejs010-nodejs-debugUpgrade openshift-origin-cartridge-jenkins-clientUpgrade rubygem-openshift-origin-consoleUpgrade rubygem-test-unitUpgrade openshift-origin-cartridge-pythonUpgrade perl-Class-AccessorUpgrade openshift-origin-consoleUpgrade jenkins-plugin-openshiftUpgrade nodejs010-nodejs-require-allUpgrade ruby193-rubygem-httpclientUpgrade libgtaUpgrade nodejs010-nodejs-bytesUpgrade ruby193-rubygem-reginUpgrade icuUpgrade perl-DateTime-Format-PgUpgrade nodejs010-nodejs-optionsUpgrade nodejs010-nodejs-cookieUpgrade ruby193-rubygem-sass-twitter-bootstrapUpgrade libgeotiffUpgrade openshift-origin-msg-node-mcollectiveUpgrade libc-clientUpgrade gpsbabelUpgrade perl-Class-DBI-PgUpgrade openshift-origin-cartridge-diyUpgrade perl-DateTime-Format-BuilderUpgrade ruby193-rubygem-json_pureUpgrade rsyslog7Upgrade python27-numpyUpgrade ruby193-rubygem-daemonsUpgrade ghostscriptUpgrade openshift-origin-cartridge-postgresqlUpgrade rubygem-bundlerUpgrade rubygem-open4Upgrade rubygem-passengerUpgrade jboss-eap6-indexUpgrade openshift-origin-cartridge-rubyUpgrade ruby193-rubygem-compassUpgrade rubygem-ruby_parserUpgrade libdapUpgrade libmcryptUpgrade nodejs010-nodejs-connectUpgrade ruby193-ruby-wrapperUpgrade openshift-origin-cartridge-cronUpgrade ruby193-rubygem-sexp_processorUpgrade shapelibUpgrade rubygem-openshift-origin-frontend-apache-vhostUpgrade postgresql92-pgRoutingUpgrade uuidUpgrade nodejs010-nodejs-sendUpgrade php-pecl-imagickUpgrade ruby193-ruby-mysqlUpgrade v8Upgrade libspatialiteUpgrade perl-YAMLUpgrade openshift-origin-cartridge-perlUpgrade gdalUpgrade haproxyUpgrade jythonUpgrade geosUpgrade rubygem-openshift-origin-controllerUpgrade nodejs010-nodejs-formidableUpgrade ruby193-rubygem-systemuUpgrade phpUpgrade rubygem-openshift-origin-commonUpgrade nodejs010-nodejs-generic-poolUpgrade openshift-origin-node-proxyUpgrade rubygem-ParseTreeUpgrade php-extrasUpgrade perl-Class-DBIUpgrade rubygem-archive-tar-minitarUpgrade rubygem-openshift-origin-admin-consoleUpgrade rubygem-openshift-origin-dns-nsupdateUpgrade ruby193-rubygem-daemon_controllerUpgrade rubygem-openshift-origin-routing-activemqUpgrade ruby193-rubygem-minitestUpgrade rubygem-sqlite3Upgrade openshift-origin-cartridge-mysqlUpgrade openshift-origin-cartridge-dependenciesUpgrade php54-php-pecl-xdebugUpgrade rubygem-openshift-origin-msg-broker-mcollectiveUpgrade php-pear-MDB2Upgrade ta-libUpgrade openshift-origin-logshifterUpgrade pam_openshiftUpgrade ruby193-rubygem-compass-railsUpgrade ImageMagickUpgrade nodejs010-nodejs-pauseUpgrade perl-Ima-DBIUpgrade ruby193-rubygem-formtasticUpgrade quartzUpgrade openshift-origin-port-proxyUpgrade perl-UNIVERSAL-monikerUpgrade nodejs010-nodejs-wordwrapUpgrade jboss-openshift-metrics-moduleUpgrade ruby193-rubygem-safe_yamlUpgrade nodejs010-nodejs-node-staticUpgrade ruby-mysqlUpgrade ruby193-rubygem-fastthreadUpgrade python27-python-pipUpgrade nodejs010-nodejs-tinycolorUpgrade php-pear-MDB2-Driver-pgsqlUpgrade rubygem-stompUpgrade ruby193-rubygem-jquery-railsUpgrade nodejs010-nodejs-mysqlUpgrade rubygem-nokogiriUpgrade ruby193-rubygem-pgUpgrade hdf5Upgrade atlasUpgrade lcmsUpgrade ruby193-facterUpgrade openshift-origin-cartridge-haproxyUpgrade haproxy15sideUpgrade ruby193-rubygem-term-ansicolorUpgrade rubygem-httpclientUpgrade openshift-origin-cartridge-mockUpgrade freexlUpgrade nodejs010-nodejs-buffer-crc32Upgrade rubygemsUpgrade lapackUpgrade socatUpgrade projUpgrade rubygem-file-tailUpgrade nodejs010-nodejs-bignumber.jsUpgrade openshift-origin-cartridge-jbossewsUpgrade rubygem-openshift-origin-nodeUpgrade ruby193-rubygem-ruby2rubyUpgrade jboss-eap6-modulesUpgrade php-pecl-xdebugUpgrade rubygem-spruzUpgrade ruby193-rubygem-hamlUpgrade ruby193-rubygem-mopedUpgrade perl-Class-Data-InheritableUpgrade nodejs010-nodejs-mongodbUpgrade rubygem-net-ssh-multiUpgrade rubygem-jsonUpgrade nodejs010-nodejs-expressUpgrade rubygem-parseconfigUpgrade ruby193-rubygem-bsonUpgrade rubygem-openshift-origin-auth-remote-userUpgrade nodejs010-nodejs-wsUpgrade nodejs010-nodejs-commanderUpgrade nodejs010-nodejs-range-parserUpgrade ruby193-mcollectiveUpgrade org.apache.maven-mavenUpgrade rubygem-diff-lcsUpgrade php54-php-pecl-imagickUpgrade ruby193-rubygem-xml-simpleUpgrade rubygem-highlineUpgrade postgresql92-postgisUpgrade rubygem-openshift-origin-frontend-apachedbUpgrade ruby193-rubygem-open4Upgrade openshift-origin-cartridge-nodejsUpgrade openshift-origin-cartridge-jenkinsUpgrade rubygem-thorUpgrade rubygem-systemuUpgrade ruby193-rubygem-passengerUpgrade perl-DBIx-ContextualFetchUpgrade ruby193-rubygem-rest-clientUpgrade rubygem-rackUpgrade perl-JSONUpgrade libevUpgrade ruby-RMagickUpgrade rubygem-sexp_processor | Oct 8, 2019 | May 14, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub