Advisory ROSA-SA-2021-1942

2021-07-0217:39:11

ROSA LAB

abf.rosalinux.ru

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.6%

JSON

Software: orca 3.6.3
OS: Cobalt 7.9

CVE-ID: CVE-2020-9298
CVE-Crit: HIGH
CVE-DESC: The spinnaker template resolution feature is vulnerable to server-side request forgery (SSRF), which allows an attacker to send requests on behalf of the spinnaker, potentially exposing sensitive data.
CVE-STATUS: default
CVE-REV: default

OSVersionArchitecturePackageVersionFilename
Cobaltanynoarchorca< 3.6.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Cobalt	any	noarch	orca	< 3.6.3	UNKNOWN