Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pv5w-g537-v27f

Опубликовано: 15 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.6

Описание

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.

EPSS

Процентиль: 10%
0.00201
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-1220

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 2 лет назад

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.

CVSS3: 5.5
redhat
больше 2 лет назад

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.

CVSS3: 5.5
nvd
больше 2 лет назад

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information.

CVSS3: 5.5
debian
больше 2 лет назад

An access-control flaw was found in the OpenStack Designate component ...

CVSS3: 6.6
fstec
почти 3 года назад

Уязвимость службы управления системой доменных имен Designate платформы для построения облачных решений OpenStack Platform, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 10%
0.00201
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-1220