SUSE SUSE OpenStack Cloud Crowbar 8
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-8023 | | Local privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap2 | HIGH 7.8 | 0.4 % | ||
| CVE-2020-8022 | | User-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviliges | HIGH 7.8 | 0.9 % | ||
| CVE-2018-17954 | crowbar-core – < 5.0+git.1582968668.1a55c77c5-3.35.4, crowbar- | crowbar provision leaks admin password to all nodes in cleartext | CRITICAL 9.3 | 0.3 % |