VIR Vulnerability Intelligence Relay

CVE-2014-0233

medium
Published 2014-11-16 · Modified 2026-05-06
CVSS v3
—
CVSS v2
6.5
VIR risk
6.5

Description

Red Hat OpenShift Enterprise 2.0 and 2.1 and OpenShift Origin allow remote authenticated users to execute arbitrary commands via shell metacharacters in a directory name that is referenced by a cartridge using the file: URI scheme.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://rhn.redhat.com/errata/RHSA-2014-0530.html

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://rhn.redhat.com/errata/RHSA-2014-0529.html

Application impact
VendorProductVersionsFixed
redhat redhatopenshift2.0
redhat redhatopenshift2.1

References

CWEs

CWE-94

Verify integrity in audit chain (admin only). AS-IS.