Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w89j-rfr2-3vwq

Опубликовано: 21 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A flaw was found in the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.

A flaw was found in the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.

EPSS

Процентиль: 46%
0.0023
Низкий

7.5 High

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 8.1
redhat
больше 1 года назад

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.

CVSS3: 8.1
nvd
больше 1 года назад

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.

EPSS

Процентиль: 46%
0.0023
Низкий

7.5 High

CVSS3

Дефекты

CWE-295