Summary
Ein lokaler Angreifer kann eine Schwachstelle in Red Hat OpenStack ausnutzen, um Informationen offenzulegen.
Product
Red Hat OpenStack ist eine Sammlung von Diensten, um Cloud-Computing in Form von Infrastructure as a Service (IaaS) bereitstellen zu können.
Vulnerabilities 1
-
Medium 5.5
Tripleo-ansible: bind keys are world readable
An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to acces…
Revision history
-
#1
Initiale Fassung
References
-
GitHub Advisory Database vom 2024-03-17
https://github.com/advisories/GHSA-pv5w-g537-v27f
-
Red Hat Bugzilla vom 2024-03-17
https://bugzilla.redhat.com/show_bug.cgi?id=2249273
-
RedHat Security Advisory vom 2024-03-17
https://access.redhat.com/security/cve/CVE-2023-6725