Vulnerability Details CVE-2014-0164
openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 29.6%
CVSS Severity
CVSS v2 Score 2.1
Products affected by CVE-2014-0164
-
cpe:2.3:a:redhat:openshift:1.2.7
-
cpe:2.3:a:redhat:openshift:2.0.5