Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pv5w-g537-v27f

Опубликовано: 15 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.6

Описание

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.

EPSS

Процентиль: 17%
0.00055
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-1220

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 2 года назад

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.

CVSS3: 6.6
redhat
почти 2 года назад

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.

CVSS3: 5.5
nvd
почти 2 года назад

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.

CVSS3: 5.5
debian
почти 2 года назад

An access-control flaw was found in the OpenStack Designate component ...

CVSS3: 6.6
fstec
около 2 лет назад

Уязвимость службы управления системой доменных имен Designate платформы для построения облачных решений OpenStack Platform, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 17%
0.00055
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-1220