Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-2621

Опубликовано: 27 июл. 2018
Источник: debian
EPSS Низкий

Описание

An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
heatnot-affectedpackage

Примечания

  • https://bugzilla.redhat.com/show_bug.cgi?id=1420990

EPSS

Процентиль: 35%
0.00413
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 8 лет назад

An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.

CVSS3: 5.9
redhat
больше 9 лет назад

An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.

CVSS3: 5.5
nvd
около 8 лет назад

An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.

CVSS3: 5.5
github
больше 4 лет назад

An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.

EPSS

Процентиль: 35%
0.00413
Низкий