CVE-2017-12155
CVE-2017-12155
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
12 dic 2017Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume.
Productos afectados
OpenStack · openstack-tripleo-heat-templates¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →