Description
rubygem-openshift-origin-console in Red Hat OpenShift 2.2 allows remote authenticated users to execute arbitrary commands via a crafted request to the Broker.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenShift 2 | rubygem-openshift-origin-console | 1.34.1.3-1.el6op | RHSA-2015:1808 |
Advisories 1
- RHSA-2015:1808 Red Hat Security Advisory: rubygem-openshift-origin-console security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- RHSA-2015:1808 vendor-advisory