Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-3866

Опубликовано: 08 нояб. 2019
Источник: nvd
CVSS3: 5.9
CVSS3: 5.5
CVSS2: 2.1
EPSS Низкий

Описание

An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world readable. A malicious system user could exploit this flaw to access sensitive user information.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:redhat:openstack-mistral:-:*:*:*:*:*:*:*

Одно из

cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openstack:14:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openstack:15:*:*:*:*:*:*:*

EPSS

Процентиль: 29%
0.00105
Низкий

5.9 Medium

CVSS3

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-732
CWE-732

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 5 лет назад

An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world readable. A malicious system user could exploit this flaw to access sensitive user information.

CVSS3: 5.9
redhat
почти 6 лет назад

An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world readable. A malicious system user could exploit this flaw to access sensitive user information.

CVSS3: 5.5
debian
больше 5 лет назад

An information-exposure vulnerability was discovered where openstack-m ...

github
около 3 лет назад

An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world readable. A malicious system user could exploit this flaw to access sensitive user information.

CVSS3: 5.9
fstec
почти 6 лет назад

Уязвимость компонента openstack-mistral платформа для построения облачных решений OpenStack Platform, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 29%
0.00105
Низкий

5.9 Medium

CVSS3

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-732
CWE-732