Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j8cr-2gxr-hvvj

Опубликовано: 05 мая 2022
Источник: github
Github: Не прошло ревью

Описание

manifests/base.pp in the puppetlabs-cinder module, as used in PackStack, uses world-readable permissions for the (1) cinder.conf and (2) api-paste.ini configuration files, which allows local users to read OpenStack administrative passwords by reading the files.

manifests/base.pp in the puppetlabs-cinder module, as used in PackStack, uses world-readable permissions for the (1) cinder.conf and (2) api-paste.ini configuration files, which allows local users to read OpenStack administrative passwords by reading the files.

EPSS

Процентиль: 13%
0.00043
Низкий

Дефекты

CWE-362

Связанные уязвимости

redhat
почти 13 лет назад

manifests/base.pp in the puppetlabs-cinder module, as used in PackStack, uses world-readable permissions for the (1) cinder.conf and (2) api-paste.ini configuration files, which allows local users to read OpenStack administrative passwords by reading the files.

nvd
почти 13 лет назад

manifests/base.pp in the puppetlabs-cinder module, as used in PackStack, uses world-readable permissions for the (1) cinder.conf and (2) api-paste.ini configuration files, which allows local users to read OpenStack administrative passwords by reading the files.

EPSS

Процентиль: 13%
0.00043
Низкий

Дефекты

CWE-362