CVE-2014-0234

CVE-2014-0234 describes a critical vulnerability in Red Hat OpenShift Enterprise 2.x before version 2.1, where the default broker.conf configuration used a hardcoded "mooo" password for a Mongo account. This allowed remote attackers to easily hijack the broker. With a CVSS score of 9.8 (Critical), this vulnerability has a network-based attack vector, low complexity, and can lead to complete compromise of confidentiality, integrity, and availability. While no active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB) has been identified, and community discussion is minimal, the inherent risk of a default, easily guessable password remains significant.