CVE-2018-17954

Опубликовано: 03 апр. 2020

Источник: nvd

CVSS3: 9.3

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue affects: SUSE OpenStack Cloud 7 crowbar-core versions prior to 4.0+git.1578392992.fabfd186c-9.63.1, crowbar-. SUSE OpenStack Cloud 8 ardana-cinder versions prior to 8.0+git.1579279939.ee7da88-3.39.3, ardana-. SUSE OpenStack Cloud 9 ardana-ansible versions prior to 9.0+git.1581611758.f694f7d-3.16.1, ardana-. SUSE OpenStack Cloud Crowbar 8 crowbar-core versions prior to 5.0+git.1582968668.1a55c77c5-3.35.4, crowbar-. SUSE OpenStack Cloud Crowbar 9 crowbar-core versions prior to 6.0+git.1582892022.cbd70e833-3.19.3, crowbar-.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:suse:openstack_cloud:7.0:*:*:*:*:*:*:*

cpe:2.3:a:suse:openstack_cloud:8.0:*:*:*:*:*:*:*

cpe:2.3:a:suse:openstack_cloud:9.0:*:*:*:*:*:*:*

cpe:2.3:a:suse:openstack_cloud_crowbar:8.0:*:*:*:*:*:*:*

cpe:2.3:a:suse:openstack_cloud_crowbar:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 13%

0.00042

Низкий

9.3 Critical

CVSS3

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-269

Связанные уязвимости

GHSA-m786-w84g-pcv9

CVSS3: 7.8

github

больше 3 лет назад

A Least Privilege Violation vulnerability in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue affects: SUSE OpenStack Cloud 7 crowbar-core versions prior to 4.0+git.1578392992.fabfd186c-9.63.1, crowbar-. SUSE OpenStack Cloud 8 ardana-cinder versions prior to 8.0+git.1579279939.ee7da88-3.39.3, ardana-. SUSE OpenStack Cloud 9 ardana-ansible versions prior to 9.0+git.1581611758.f694f7d-3.16.1, ardana-. SUSE OpenStack Cloud Crowbar 8 crowbar-core versions prior to 5.0+git.1582968668.1a55c77c5-3.35.4, crowbar-. SUSE OpenStack Cloud Crowbar 9 crowbar-core versions prior to 6.0+git.1582892022.cbd70e833-3.19.3, crowbar-.

BDU:2020-02849

CVSS3: 7.8

fstec

почти 6 лет назад

Уязвимость автоматизированной платформы облачных вычислений SUSE OpenStack Cloud, связанная с небезопасным управлением привилегиями, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 13%

0.00042

Низкий

9.3 Critical

CVSS3

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-269