Lucene search
+L

12 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/15 12:00 a.m.•4 views

CVE-2022-32155: Incorrect Permission Assignment for Critical Resource

In universal forwarder versions before 9.0, management services are available remotely by default. When not required, it introduces a potential exposure, but it is not a vulnerability. If exposed, we recommend each customer assess the potential severity specific to your environment. In 9.0, the...

7.5CVSS7.2AI score0.01976EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2019/10/11 10:04 a.m.•28 views

CVE-2016-9590

An information-disclosure flaw was discovered in Red Hat OpenStack Platform director's installation of Object Storage swift. During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf file with world-readable permissions...

4CVSS1.1AI score0.01111EPSS
SaveExploits0References1
Veracode
Veracode
•added 2019/01/15 9:15 a.m.•26 views

Information Disclosure

puppet-swift is vulnerable to information-disclosure. The vulnerability is possible as it has a flaw in the service deployment and leaves the proxy-server.conf file with world-readable permissions...

6.5CVSS6.2AI score0.01111EPSS
SaveExploits0References7Affected Software2
NVD
NVD
•added 2018/06/04 6:29 a.m.•27 views

CVE-2017-18285

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change...

7.1CVSS6.8AI score0.00314EPSS
SaveExploits0References3
Prion
Prion
•added 2018/06/04 6:29 a.m.•24 views

Design/Logic Flaw

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change...

3.6CVSS6.7AI score0.00314EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2018/06/04 6:00 a.m.•41 views

CVE-2017-18285

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change...

7.1CVSS7.1AI score0.00314EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/04 12:00 a.m.•4 views

CVE-2017-18285: Incorrect Permission Assignment for Critical Resource

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change...

7.1CVSS7AI score0.00314EPSS
SaveExploits0References2
OSV
OSV
•added 2018/04/26 5:29 p.m.•40 views

CVE-2016-9590

puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage swift. During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf...

6.5CVSS6.7AI score
SaveExploits0References5
Prion
Prion
•added 2018/04/26 5:29 p.m.•19 views

Information disclosure

puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage swift. During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf...

4CVSS6.8AI score0.01111EPSS
SaveExploits0References5Affected Software2
Cvelist
Cvelist
•added 2018/04/26 5:00 p.m.•59 views

CVE-2016-9590

puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage swift. During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf...

6.5CVSS6.4AI score0.01111EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/26 12:00 a.m.•2 views

CVE-2016-9590: Exposure of Sensitive Information to an Unauthorized Actor

puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage swift. During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf...

6.5CVSS6.6AI score0.01111EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2017/03/01 1:31 p.m.•17 views

puppet-swift: installs config file with world readable permissions

An information-disclosure flaw was discovered in Red Hat OpenStack Platform director's installation of Object Storage swift. During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf file with world-readable permissions...

6.5CVSS5.8AI score0.01111EPSS
SaveExploits0References4
Rows per page
Query Builder