Description
In meta/classes/package_ipk.bbclass in Poky in poky-pyro 17.0.0 for Yocto Project through YP Core - Pyro 2.3, attackers can obtain sensitive information by reading a URL in a Source entry in an ipk package.
Unscored
CVE-2017-9731
EUVD-2017-18662GHSA-m98x-g53p-4j9m
In meta/classes/package_ipk.bbclass in Poky in poky-pyro 17.0.0 for Yocto Project through YP Core - Pyro 2.3, attackers can obtain sensitiv…
Published Jun 16, 2017 · Updated Aug 5, 2024 · Assigned by mitre