CVE-2014-3674

Status: ModifiedHigh (7.5)—

Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors.

CVSS

Version: 2.0
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Base score: 7.5

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 2.06%
Percentile among all scored CVEs: 81
Score date: 10/8/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Redhat — Openshift

CWEs

CWE-264

References

Raw JSON (NVD)

Show

{
  "id": "CVE-2014-3674",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-11-13T21:32:03.560",
  "references": [
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2014-1796.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2014-1906.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2014-1796.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2014-1906.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Red Hat OpenShift Enterprise anterior a 2.2 no restringe debidamente el acceso a gears, lo que permite a atacantes remotos acceder a los recursos de red de gears arbitrarios a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:08:43.887",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:redhat:openshift:*:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B6B266CF-DDC0-421D-A36D-F123241E69B3",
              "versionEndIncluding": "2.1.8"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B497EBB1-17A4-4FE8-B9FF-B2B53B18C175"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift:2.0.1:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7405F776-4F1C-467A-AC66-5AABBE43411B"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift:2.0.2:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "437AB2B0-0175-4E48-A1A5-6723C97F3253"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift:2.0.3:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BA5E9EB2-607B-43A7-A75F-CA171529B9E8"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift:2.0.4:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "582D97B4-ADBC-485D-B00F-AD9F3566F711"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift:2.0.5:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AB204392-8CE0-4B3B-9399-F6B83EB9006F"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift:2.0.6:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D84F1EB-5654-4B52-92E3-5DA10F97CA39"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift:2.1:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC659BB6-CD01-4F4A-BFBC-227A52ECB391"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift:2.1.1:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A463CF4B-2010-4AB5-9275-020BF53B5FA8"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift:2.1.2:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C6C0F050-48C7-4AFB-9DB3-A60C7E3501C0"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift:2.1.3:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "459F1262-B8B0-475E-A7F2-0913FEE6F715"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift:2.1.4:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "732EE887-EB12-492F-A4E4-3F441BB92C8A"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift:2.1.5:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "34ACA7BA-8DB2-4645-9FF1-DB88195FFD2C"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift:2.1.6:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A87A0BC7-F7D0-4090-992A-C26942FD82DE"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift:2.1.7:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "81360600-BF69-4078-A6E6-EE6606391924"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}