CVE-2022-38060

2022-12-2100:00:00

CWE-269

talos

www.cve.org

openstack

kolla

privilege escalation

sudo

misconfiguration

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

Percentile

12.9%

JSON

A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla git master 05194e7618. A misconfiguration in /etc/sudoers within a container can lead to increased privileges.

CNA Affected

[
  {
    "vendor": "OpenStack",
    "product": "OpenStack",
    "versions": [
      {
        "version": "git master 05194e7618",
        "status": "affected"
      }
    ]
  }
]