Описание
The machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensitive information by running that command.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 7 | oci-register-machine | Will not fix | ||
| Red Hat Enterprise Linux 7 | systemd | Will not fix |
Показывать по
10
Дополнительная информация
Статус:
Low
Дефект:
CWE-200
https://bugzilla.redhat.com/show_bug.cgi?id=1360634oci-register-machine: information exposure for docker containers
EPSS
Процентиль: 33%
0.00398
Низкий
4 Medium
CVSS3
1.9 Low
CVSS2
Связанные уязвимости
CVSS3: 3.3
ubuntu
больше 9 лет назад
The machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensitive information by running that command.
CVSS3: 3.3
nvd
больше 9 лет назад
The machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensitive information by running that command.
EPSS
Процентиль: 33%
0.00398
Низкий
4 Medium
CVSS3
1.9 Low
CVSS2