CVE-2014-3602
Red Hat OpenShift < 2.2 - Information Disclosure via /proc/net/tcp
Title source: llmDescription
Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number information for remote systems by reading /proc/net/tcp.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-1906.html
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-1796.html
Scores
EPSS
0.0038
EPSS Percentile
30.3%
Details
CWE
CWE-264
Status
published
Products (16)
redhat/openshift
2.0
redhat/openshift
2.0.1
redhat/openshift
2.0.2
redhat/openshift
2.0.3
redhat/openshift
2.0.4
redhat/openshift
2.0.5
redhat/openshift
2.0.6
redhat/openshift
2.1
redhat/openshift
2.1.1
redhat/openshift
2.1.2
... and 6 more
Published
Nov 13, 2014
Tracked Since
Feb 18, 2026