CVE-2017-2622

An accessibility flaw was found in the OpenStack Workflow (mistral) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.

Score

CVSS 3.0 5.9 Medium

Status

Modified - secalert@redhat.com

Published

2018-07-27

Last modified

2024-08-05

Weaknesses

CWE-200, CWE-552

Affected products

• Openstack (Redhat)
• Openstack-mistral (Unknown)

References

• https://access.redhat.com/errata/RHSA-2017:1584
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2622