CVE-2014-0188

Name of the Vulnerable Software and Affected Versions Red Hat OpenShift Enterprise versions 2.0.5, 1.2.7 and earlier

Description The issue allows remote attackers to bypass authentication and impersonate arbitrary users via the X-Remote-User header in a request to a passthrough trigger, due to improper handling of authentication requests from the remote-user auth plugin.

Recommendations For Red Hat OpenShift Enterprise versions 2.0.5, 1.2.7 and earlier, consider restricting access to the passthrough trigger to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.