Skip to content
OpenAdvisories

Package · crates.io

coreos-installer

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2021-3917

    coreos-installer < 0.10.0 writes world-readable Ignition config to installed system

    A flaw was found in the coreos-installer, where it writes the Ignition config to the target system with world-readable access permissions. This flaw allows a local attacker to have read access to potentially sensitive data. The highest threat from this vulner…

    coreos-installer crates.io