← voltar
CVE-2017-2621

CVE-2017-2621

CVSS 5.9 MEDIUMEPSS 0.4%CWE-552
An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
Produtos afetados
Red Hat · openstack-heat

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://access.redhat.com/errata/RHSA-2017:1243https://access.redhat.com/errata/RHSA-2017:1464https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2621http://www.securityfocus.com/bid/96280