Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mm98-g27p-4qwj

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

tcmu-runner version 0.91 up to 1.20 is vulnerable to information disclosure in handler_qcow.so resulting in non-privileged users being able to check for existence of any file with root privileges.

tcmu-runner version 0.91 up to 1.20 is vulnerable to information disclosure in handler_qcow.so resulting in non-privileged users being able to check for existence of any file with root privileges.

EPSS

Процентиль: 53%
0.003
Низкий

7.5 High

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 3.3
redhat
больше 8 лет назад

tcmu-runner version 0.91 up to 1.20 is vulnerable to information disclosure in handler_qcow.so resulting in non-privileged users being able to check for existence of any file with root privileges.

CVSS3: 7.5
nvd
около 8 лет назад

tcmu-runner version 0.91 up to 1.20 is vulnerable to information disclosure in handler_qcow.so resulting in non-privileged users being able to check for existence of any file with root privileges.

suse-cvrf
больше 8 лет назад

Security update for tcmu-runner

EPSS

Процентиль: 53%
0.003
Низкий

7.5 High

CVSS3

Дефекты

CWE-200