GCVE - cpe:2.3:a:redhat:openshift:2.1:*:*:*:enterprise:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:openshift:2.1:*:*:*:enterprise:*:*:*

part: a version: 2.1 update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Openshift (`c1e101a6-4198-51dc-8dd3-fad3fe32c7b8`)
Edition	*
Language	*
Software edition	enterprise
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/openshift/okd`	purl2cpe	2026-06-01 10:12:54.187518

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-3674`	vulnerable	2026-06-08 05:05:42.338063	Details available Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors. Published: 2014-11-13T15:00:00.000Z Updated: 2024-08-06T10:50:18.017Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2014-1906.html http://rhn.redhat.com/errata/RHSA-2014-1796.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3602`	vulnerable	2026-06-08 05:05:33.697580	Details available Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number information for remote systems by reading /proc/net/tcp. Published: 2014-11-13T15:00:00.000Z Updated: 2024-08-06T10:50:17.591Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2014-1906.html http://rhn.redhat.com/errata/RHSA-2014-1796.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3496`	vulnerable	2026-06-08 05:05:33.045991	Details available cartridge_repository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a (1) .tar.gz, (2) .zip, (3) .tgz, or (4) .tar file extension in a cartridge manifest file. Published: 2014-06-20T14:00:00.000Z Updated: 2024-08-06T10:43:06.098Z Open on db.gcve.eu Reference links http://secunia.com/advisories/59298 https://github.com/openshift/origin-server/pull/5521 http://rhn.redhat.com/errata/RHSA-2014-0764.html http://rhn.redhat.com/errata/RHSA-2014-0762.html http://rhn.redhat.com/errata/RHSA-2014-0763.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0233`	vulnerable	2026-06-08 05:05:12.409575	Details available Red Hat OpenShift Enterprise 2.0 and 2.1 and OpenShift Origin allow remote authenticated users to execute arbitrary commands via shell metacharacters in a directory name that is referenced by a cartridge using the file: URI scheme. Published: 2014-11-16T11:00:00.000Z Updated: 2024-08-06T09:05:39.283Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2014-0530.html http://rhn.redhat.com/errata/RHSA-2014-0529.html https://bugzilla.redhat.com/show_bug.cgi?id=1096955	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0175`	vulnerable	2026-06-08 05:05:12.039052	Details available mcollective has a default password set at install Published: 2019-12-13T12:40:38.000Z Updated: 2024-08-06T09:05:39.212Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2014-0175 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0175 https://access.redhat.com/security/cve/cve-2014-0175	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.