Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-6725

Опубликовано: 15 мар. 2024
Источник: debian
EPSS Низкий

Описание

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
designatenot-affectedpackage

Примечания

  • https://bugzilla.redhat.com/show_bug.cgi?id=2249273

EPSS

Процентиль: 17%
0.00055
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 2 года назад

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.

CVSS3: 6.6
redhat
почти 2 года назад

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.

CVSS3: 5.5
nvd
почти 2 года назад

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.

CVSS3: 6.6
github
почти 2 года назад

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.

CVSS3: 6.6
fstec
около 2 лет назад

Уязвимость службы управления системой доменных имен Designate платформы для построения облачных решений OpenStack Platform, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 17%
0.00055
Низкий