PT-2022-27083 · Openstack · Openstack Sushy-Tools

🗓️ 29 Oct 2022 00:00:00Reported by Positive TechnologiesType

Boot device changes remove libvirt password protection in OpenStack Sushy-Tools and VirtualBMC for unsupported configurations before fixes.

Reporter	Title	Published	Views	Family All 24
Circl	CVE-2022-44020	30 Oct 202211:34	–	circl
CNNVD	OpenStack 安全漏洞	30 Oct 202200:00	–	cnnvd
CVE	CVE-2022-44020	29 Oct 202200:00	–	cve
Cvelist	CVE-2022-44020	29 Oct 202200:00	–	cvelist
EUVD	EUVD-2022-7030	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 35 Update: python-virtualbmc-3.0.0-1.fc35	29 Nov 202200:57	–	fedora
Fedora	[SECURITY] Fedora 36 Update: python-virtualbmc-3.0.0-1.fc36	29 Nov 202201:28	–	fedora
Fedora	[SECURITY] Fedora 37 Update: python-virtualbmc-3.0.0-1.fc37	29 Nov 202201:14	–	fedora
Tenable Nessus	Fedora 35 : python-virtualbmc (2022-42723b43fe)	23 Dec 202200:00	–	nessus
Tenable Nessus	Fedora 37 : python-virtualbmc (2022-471e14677d)	14 Nov 202400:00	–	nessus

Source	Link
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/GAD7QJIUWPCKJIGYP7PPHH5DILOEONFE
osv	www.osv.dev/vulnerability/GHSA-5pj3-6fqm-8m7m
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEQVJF3OQGSDCSQTQQSC54JEGLMSNB4Q
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-44020
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/QMSUGS4B6EBRHBJMTRXL5RIKJTZTEMJC
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/KEQVJF3OQGSDCSQTQQSC54JEGLMSNB4Q
review	www.review.opendev.org/c/openstack/sushy-tools/+/862625
review	www.review.opendev.org/c/openstack/virtualbmc/+/862620
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GAD7QJIUWPCKJIGYP7PPHH5DILOEONFE
osv	www.osv.dev/vulnerability/CVE-2022-44020

09 Feb 2023 00:00Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.5

EPSS0.00094

SSVC