Skip to content
OpenAdvisories
High WID-SEC-2022-2272 2 CVEs

Red Hat OpenStack: Mehrere Schwachstellen

Published Dec 8, 2022 · Updated Dec 8, 2022 · de-DE

Vendor: Red Hat Product: OpenStack 13.0 Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.

Product

Red Hat OpenStack ist eine Sammlung von Diensten, um Cloud-Computing in Form von Infrastructure as a Service (IaaS) bereitstellen zu können.

Vulnerabilities 2

  • High 7.5
    CVE-2022-3596

    Instack-undercloud: rsync leaks information to undercloud

    An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administr…

    Red Hat Red Hat OpenStack Platform 13.0 - ELS Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUS
  • Medium 5.5
    CVE-2022-44020

    OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions

    An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an "unsupported, …

    virtualbmc sushy-tools PyPI

Revision history

  1. #1

    Initiale Fassung

References