CVE-2014-3674: Red Hat Openshift

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

Red Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows remote attackers to access the network resources of arbitrary gears via unspecified vectors.

Affected products

• Red Hat Openshift: up to and including 2.1.8; version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; …

Published 2014-11-13. Last modified 2026-06-17.