Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-2621

Опубликовано: 27 июл. 2018
Источник: debian
EPSS Низкий

Описание

An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
heatnot-affectedpackage

Примечания

  • https://bugzilla.redhat.com/show_bug.cgi?id=1420990

EPSS

Процентиль: 22%
0.00072
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 7 лет назад

An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.

CVSS3: 5.9
redhat
почти 9 лет назад

An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.

CVSS3: 5.5
nvd
больше 7 лет назад

An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.

CVSS3: 5.5
github
почти 4 года назад

An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.

EPSS

Процентиль: 22%
0.00072
Низкий