CVE-2014-0084 — Vulnerability in openshift-origin-node — CVE Details
MEDIUM
openshift-origin-node Improper Input Validation vulnerability
Published May 17, 2022Updated November 8, 2023Source: osv
Summary
Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly.
Advisory Timeline
- First published May 17, 2022 (1609 days ago).
- Last revised November 8, 2023 — 539 days after initial publication.
Affected Packages (1)
Affects 1 ecosystem: rubygems (1).
| Package | Ecosystem | Affected | Fixed In |
|---|---|---|---|
| openshift-origin-node | rubygems | 1.3.1, 1.3.2, 1.3.3 | Range-based data available |
Vulnerability Classification
Common Weakness Enumeration (CWE) identifiers for this vulnerability type.
- CWE-20Improper Input ValidationMITRE
CVSS Score Breakdown
What the CVSS (Common Vulnerability Scoring System) 5.5 score means for each attack dimension.
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
- https://nvd.nist.gov/vuln/detail/CVE-2014-0084ADVISORY
- https://access.redhat.com/errata/RHBA-2014:0487WEB
- https://access.redhat.com/security/cve/CVE-2014-0084WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=1065198WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0084WEB
- https://github.com/openshift/origin-serverPACKAGE
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/openshift-origin-node/CVE-2014-0084.ymlWEB
Frequently Asked Questions
- What is CVE-2014-0084?
- openshift-origin-node Improper Input Validation vulnerability This vulnerability has been assigned a severity rating of MEDIUM (CVSS score: 5.5/10).
- How do I check if my project is affected by CVE-2014-0084?
- CVE-2014-0084 affects openshift-origin-node. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2014-0084 and 200,000+ other known vulnerabilities.
Severity & Exploitability
CVSS Score
5.5
Exploitation requires specific conditions or has limited impact. Remediate within weeks.
Also Known As
GHSA-756m-3qf2-hp58
Related CVEs
- CVE-2026-107715MEDIUM
Mechanize sends credential headers to another host after an HTTP redirect
- CVE-2026-107399MEDIUM
Mechanize sends credential headers to another origin after a meta refresh
Check if you're affected
Scan your dependencies to see if this vulnerability affects your projects.
Scan Your Dependencies