Описание
An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py. component.
Ссылки
- ExploitIssue TrackingPatch
- Third Party Advisory
- Patch
- ExploitIssue TrackingPatch
- Third Party Advisory
- Patch
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:openstack:magnum:-:*:*:*:*:*:*:*
EPSS
Процентиль: 70%
0.0063
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-367
Связанные уязвимости
CVSS3: 9.8
ubuntu
почти 2 года назад
An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py. component.
CVSS3: 6.3
github
почти 2 года назад
OpenStack magnum vulnerable to time-of-check to time-of-use (TOCTOU) attack
EPSS
Процентиль: 70%
0.0063
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-367