CVE-2014-3602

low

Published 2014-11-13 · Modified 2026-05-06

CVSS v3

—

CVSS v2

2.1

VIR risk

2.1

Description

Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number information for remote systems by reading /proc/net/tcp.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://rhn.redhat.com/errata/RHSA-2014-1906.html

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://rhn.redhat.com/errata/RHSA-2014-1796.html

Application impact

Vendor	Product	Versions
redhat	openshift	`{"endIncluding":"2.1.8"}`
redhat	openshift	`2.0`
redhat	openshift	`2.0.1`
redhat	openshift	`2.0.2`
redhat	openshift	`2.0.3`
redhat	openshift	`2.0.4`
redhat	openshift	`2.0.5`
redhat	openshift	`2.0.6`
redhat	openshift	`2.1`
redhat	openshift	`2.1.1`
redhat	openshift	`2.1.2`
redhat	openshift	`2.1.3`
redhat	openshift	`2.1.4`
redhat	openshift	`2.1.5`
redhat	openshift	`2.1.6`
redhat	openshift	`2.1.7`

References

CWEs

CWE-264

Verify integrity in audit chain (admin only). AS-IS.