Beveiligingsadvies

CVE-2016-9599

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-04-23 21:00:00

Laatst bijgewerkt 2024-08-06 02:59:03

Toegewezen door redhat

CVSS-score 7.1

Status PUBLISHED

Beschrijving

puppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the IPtables rules management, which allowed the creation of TCP/UDP rules with empty port values. If SSL is enabled, a malicious user could use these open ports to gain access to unauthorized resources.

← Alle CVE's bekijken Bekijk op cve.org ↗