Описание
An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.
An access-control flaw was found in the OpenStack Orchestration (heat) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) | openstack-heat | Not affected | ||
| Red Hat Enterprise Linux OpenStack Platform 6 (Juno) | openstack-heat | Not affected | ||
| Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) | openstack-heat | Not affected | ||
| Red Hat OpenStack Platform 11 (Ocata) | openstack-heat | Not affected | ||
| Red Hat OpenStack Platform 8 (Liberty) | openstack-heat | Not affected | ||
| Red Hat OpenStack Platform 10.0 (Newton) | openstack-heat | Fixed | RHSA-2017:1243 | 17.05.2017 |
| Red Hat OpenStack Platform 9.0 (Mitaka) | openstack-heat | Fixed | RHSA-2017:1464 | 14.06.2017 |
Показывать по
Дополнительная информация
Статус:
EPSS
5.9 Medium
CVSS3
Связанные уязвимости
An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.
An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.
An access-control flaw was found in the OpenStack Orchestration (heat) ...
An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.
EPSS
5.9 Medium
CVSS3