Lucene search
RedHatRHSA-2022:8896HistoryDec 08, 2022 - 10:48 a.m.
(RHSA-2022:8896) Moderate: Red Hat OpenStack Platform 13.0 (python-virtualbmc) security update
2022-12-0810:48:20
access.redhat.com
16
red hat openstack
python
virtual bmc
security update
ipmi commands
cve-2022-44020
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
17.8%
A virtual BMC for controlling virtual machines using IPMI
commands.
Security Fix:
- VirtualBMC: Removal of password protection from the managed libvirt XML
domain (CVE-2022-44020)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | noarch | python2-virtualbmc-tests | < 1.2.0-2.el7ost | python2-virtualbmc-tests-1.2.0-2.el7ost.noarch.rpm |
| RedHat | 7 | noarch | python2-virtualbmc | < 1.2.0-2.el7ost | python2-virtualbmc-1.2.0-2.el7ost.noarch.rpm |
Related
fedora
fedora
[SECURITY] Fedora 37 Update: python-virtualbmc-3.0.0-1.fc37
2022-11-29 01:14:57
[SECURITY] Fedora 36 Update: python-virtualbmc-3.0.0-1.fc36
2022-11-29 01:28:06
[SECURITY] Fedora 35 Update: python-virtualbmc-3.0.0-1.fc35
2022-11-29 00:57:05
openvas
openvas
Fedora: Security Advisory for python-virtualbmc (FEDORA-2022-471e14677d)
2022-11-29 00:00:00
Fedora: Security Advisory for python-virtualbmc (FEDORA-2022-42723b43fe)
2022-11-29 00:00:00
Fedora: Security Advisory for python-virtualbmc (FEDORA-2022-72b8efd577)
2022-11-29 00:00:00
osv
osv
CVE-2022-44020
2022-10-30 00:15:10
OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions
2022-10-30 12:00:28
cvelist
cvelist
CVE-2022-44020
2022-10-29 00:00:00
nvd
nvd
CVE-2022-44020
2022-10-30 00:15:10
prion
prion
Design/Logic Flaw
2022-10-30 00:15:00
nessus
nessus
Fedora 35 : python-virtualbmc (2022-42723b43fe)
2022-12-23 00:00:00
Fedora 36 : python-virtualbmc (2022-72b8efd577)
2022-12-22 00:00:00
cve
cve
CVE-2022-44020
2022-10-30 00:15:10
redhatcve
redhatcve
CVE-2022-44020
2022-11-14 21:26:02
github
github
OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions
2022-10-30 12:00:28
veracode
veracode
Information Disclosure
2022-11-01 04:49:02
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
17.8%
Related for RHSA-2022:8896