instack-undercloud vulnerable to symlink attack on tmp files

2022-05-1301:07:33

Google

osv.dev

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.

CPENameOperatorVersion
instack-undercloudeq5.3.10
instack-undercloudeq7.0.0.0b1
instack-undercloudeq5.3.4
instack-undercloudeq7.2.0
instack-undercloudeq5.0.0
instack-undercloudeq5.0.0.0rc1
instack-undercloudeq4.2.1
instack-undercloudeq5.3.8
instack-undercloudeq5.0.0.0rc2
instack-undercloudeq6.1.7

Name	Operator	Version
instack-undercloud	eq	5.3.10
instack-undercloud	eq	7.0.0.0b1
instack-undercloud	eq	5.3.4
instack-undercloud	eq	7.2.0
instack-undercloud	eq	5.0.0
instack-undercloud	eq	5.0.0.0rc1
instack-undercloud	eq	4.2.1
instack-undercloud	eq	5.3.8
instack-undercloud	eq	5.0.0.0rc2
instack-undercloud	eq	6.1.7