VDB
BDU%3A2022-04103
BDU%3A2022-04103
PUBLISHED
CVSS 3.5 LOW
Уязвимость реализации конфигурации info-get guestinfo.ignition.config.data библиотеки Ignition связана с недостаточной защитой служебных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации
Risk Scores
CVSS 2.0
3.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fedora Project, Red Hat Inc., Facade | Fedora, Red Hat OpenShift Container Platform, Red Hat Enterprise Linux, Ignition |
Timeline
- Jul 6, 2022 CVE Published
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2082274 url
- https://github.com/coreos/ignition/commit/4b70b44b430ecf8377a276e89b5acd3a6957d4ea url
- https://github.com/coreos/ignition/issues/1300 url
- https://github.com/coreos/ignition/issues/1315 url
- https://github.com/coreos/ignition/pull/1350 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LY7LKGMQMXV6DGD263YQHNSLOJJ5VLV5/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NP765L7TJI7CD4XVOHUWZVRYRH3FYBOR/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T5QQXRGQKTN4YX2ZF3GQNEBDEOKJGCN3/ url
- https://access.redhat.com/security/cve/cve-2022-1706 url
- https://nvd.nist.gov/vuln/detail/CVE-2022-1706 url