Описание
Confluent Ansible (cp-ansible) version 5.5.0, 5.5.1, 5.5.2 and 6.0.0 is vulnerable to Incorrect Access Control via its auxiliary component that allows remote attackers to access sensitive information.
Ссылки
- Vendor Advisory
- Third Party Advisory
- Vendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:confluent:ansible:5.5.0:*:*:*:*:*:*:*
cpe:2.3:a:confluent:ansible:5.5.1:*:*:*:*:*:*:*
cpe:2.3:a:confluent:ansible:5.5.2:*:*:*:*:*:*:*
cpe:2.3:a:confluent:ansible:6.0.0:*:*:*:*:*:*:*
EPSS
Процентиль: 74%
0.00798
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-862
Связанные уязвимости
github
больше 3 лет назад
Confluent Ansible (cp-ansible) version 5.5.0, 5.5.1, 5.5.2 and 6.0.0 is vulnerable to Incorrect Access Control via its auxiliary component that allows remote attackers to access sensitive information.
EPSS
Процентиль: 74%
0.00798
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-862