openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by reading the file.

The remote Red Hat Enterprise Linux CoreOS 1 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2014:0461 advisory.

  - mcollective: world readable client config (CVE-2014-0164)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Red Hat Enterprise Linux CoreOS 2 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2014:0460 advisory.

  - mcollective: world readable client config (CVE-2014-0164)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An updated openshift-origin-broker-util package that fixes one security issue is now available for Red Hat OpenShift Enterprise 1.2.7.

The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The openshift-origin-broker-util package provides utility scripts for the OpenShift Broker service, which manages all user logins, DNS name resolution, application states, and general orchestration of the applications.

It was discovered that the mcollective client.cfg configuration file was world-readable by default. A malicious, local user on a host with the OpenShift Broker installed could read sensitive information regarding the mcollective installation, including mcollective authentication credentials. A malicious user able to obtain said credentials would potentially have full control over all OpenShift nodes managed via mcollective. (CVE-2014-0164)

This issue was discovered by Jeremy Choi of the Red Hat Quality Engineering Group.

All openshift-origin-broker-util users are advised to upgrade to this updated package, which corrects this issue.

An updated openshift-origin-broker-util package that fixes one security issue is now available for Red Hat OpenShift Enterprise 2.0.5.

The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The openshift-origin-broker-util package provides utility scripts for the OpenShift Broker service, which manages all user logins, DNS name resolution, application states, and general orchestration of the applications.

It was discovered that the mcollective client.cfg configuration file was world-readable by default. A malicious, local user on a host with the OpenShift Broker installed could read sensitive information regarding the mcollective installation, including mcollective authentication credentials. A malicious user able to obtain said credentials would potentially have full control over all OpenShift nodes managed via mcollective. (CVE-2014-0164)

This issue was discovered by Jeremy Choi of the Red Hat Quality Engineering Group.

All openshift-origin-broker-util users are advised to upgrade to this updated package, which corrects this issue.

ID	Name	Product	Family	Type	Severity
312008	RHCOS 1 : openshift-origin-broker-util (RHSA-2014:0461)	Nessus	Red Hat Local Security Checks	Local	medium
311998	RHCOS 2 : openshift-origin-broker-util (RHSA-2014:0460)	Nessus	Red Hat Local Security Checks	Local	medium
119351	RHEL 6 : openshift-origin-broker-util (RHSA-2014:0461)	Nessus	Red Hat Local Security Checks	Local	low
119350	RHEL 6 : openshift-origin-broker-util (RHSA-2014:0460)	Nessus	Red Hat Local Security Checks	Local	low

Detections

Analytics

CVE-2014-0164

medium

Tenable Plugins

medium

medium

low

low