Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-37424 EUVD-2022-40054GHSA-x8qx-hq9r-9fvg

The FILES Directive allows arbitrary files from the frontend system (including sensitive files) to be included when a VM is started from that template, which may result in Information Disclosure.

Published Oct 28, 2022 · Updated Aug 3, 2024 · Assigned by blackberry

Description

Files or Directories Accessible to External Parties vulnerability in OpenNebula on Linux allows File Discovery.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS opennebula No fix yet —
Ubuntu 16.04 LTS opennebula No fix yet —

References