Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w89j-rfr2-3vwq

Опубликовано: 21 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A flaw was found in the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.

A flaw was found in the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.

EPSS

Процентиль: 32%
0.00392
Низкий

7.5 High

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 8.1
redhat
около 2 лет назад

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.

CVSS3: 8.1
nvd
около 2 лет назад

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a man-in-the-middle (MITM) attack.

EPSS

Процентиль: 32%
0.00392
Низкий

7.5 High

CVSS3

Дефекты

CWE-295