Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-637g-65xr-xr73

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Ceph-ansible 4.0.34.1 creates /etc/ceph/iscsi-gateway.conf with insecure default permissions, allowing any user to read the sensitive information within.

Ceph-ansible 4.0.34.1 creates /etc/ceph/iscsi-gateway.conf with insecure default permissions, allowing any user to read the sensitive information within.

EPSS

Процентиль: 5%
0.0002
Низкий

Дефекты

CWE-312

Связанные уязвимости

CVSS3: 5.5
redhat
около 5 лет назад

A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.

CVSS3: 5.5
nvd
около 5 лет назад

A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.

EPSS

Процентиль: 5%
0.0002
Низкий

Дефекты

CWE-312