CVE-2014-0164 in openshift
Summary
openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
12/03/2013
Disclosure
05/05/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 69588 | Red Hat openshift Configuration File client.cfg cryptographic issue | 310 | Not defined | Not defined | CVE-2014-0164 |