A flaw was found in the coreos-installer, where it writes the Ignition config to the target system with world-readable access permissions. This flaw allows a local attacker to have read access to potentially sensitive data. The highest threat from this vulnerability is to confidentiality.
CPE | Name | Operator | Version |
---|---|---|---|
coreos-installer | lt | 0.10.0 |