exploitDog

CVE-2012-5518

Опубликовано: 25 нояб. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 4.3

EPSS Низкий

Описание

vdsm: certificate generation upon node creation allowing vdsm to start and serve requests from anyone who has a matching key (and certificate)

Ссылки

http://www.openwall.com/lists/oss-security/2012/11/11/3
Mailing List
Third Party Advisory
https://access.redhat.com/security/cve/cve-2012-5518
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5518
Issue Tracking
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/11/11/3
Mailing List
Third Party Advisory
https://access.redhat.com/security/cve/cve-2012-5518
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5518
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ovirt:vdsm:-:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.0022

Низкий

7.5 High

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-295

Связанные уязвимости

CVE-2012-5518

redhat

больше 13 лет назад

vdsm: certificate generation upon node creation allowing vdsm to start and serve requests from anyone who has a matching key (and certificate)

GHSA-vvr9-cxf3-4gvj

CVSS3: 7.5

github

почти 4 года назад

vdsm: certificate generation upon node creation allowing vdsm to start and serve requests from anyone who has a matching key (and certificate)

EPSS

Процентиль: 44%

0.0022

Низкий

7.5 High

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-295