CVE-2014-0234

moderate-risk
Published 2020-02-12

The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this may overlap CVE-2013-4253 and CVE-2013-4281.

Do I need to act?

~
8.8% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Redhat

References (10)

Exploit http://openwall.com/lists/oss-security/2014/06/05/19
Third Party Advisory http://www.securityfocus.com/bid/67657
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1097008
Third Party Advisory https://github.com/openshift/openshift-extras/blob/master/README.md
Vendor Advisory https://rhn.redhat.com/errata/RHSA-2014-0487.html
Exploit http://openwall.com/lists/oss-security/2014/06/05/19
Third Party Advisory http://www.securityfocus.com/bid/67657
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1097008
Third Party Advisory https://github.com/openshift/openshift-extras/blob/master/README.md
Vendor Advisory https://rhn.redhat.com/errata/RHSA-2014-0487.html
47
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 10/34 · Low
Exposure 5/34 · Minimal