CVE-2017-2621 | BDVDB-2026-105145 Detail
Red Hatopenstack-heat
Description#
An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.
Impact#
Per CVSS v3.0: confidentiality impact high, integrity impact none, availability impact none. Attack vector: local.
Weaknesses#
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.