CVE-2015-5222

Red Hat OpenShift Enterprise 3.0.0.0 does not properly check permissions, which allows remote authenticated users with build permissions to execute arbitrary shell commands with root permissions on arbitrary build pods via unspecified vectors.

Score

CVSS 2.0 8.5 High

Status

Modified - secalert@redhat.com

Published

2015-08-24

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Openshift (Redhat)

References

• https://access.redhat.com/errata/RHSA-2015:1650