Unrated severityNVD Advisory· Published Nov 16, 2014· Updated May 6, 2026

CVE-2014-0233

Description

Red Hat OpenShift Enterprise 2.0 and 2.1 and OpenShift Origin allow remote authenticated users to execute arbitrary commands via shell metacharacters in a directory name that is referenced by a cartridge using the file: URI scheme.

Affected products

Red Hat/Openshift2 versions
cpe:2.3:a:redhat:openshift:2.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redhat:openshift:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openshift:2.1:*:*:*:enterprise:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

bugzilla.redhat.com/show_bug.cginvdExploit
rhn.redhat.com/errata/RHSA-2014-0529.htmlnvdVendor Advisory
rhn.redhat.com/errata/RHSA-2014-0530.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000