CVE-2021-3917CWE-276

A flaw was found in the coreos-installer, where it writes the Ignition config to the target system with world-readable access permissions

published August 23, 2022

CVSS
—
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

A flaw was found in the coreos-installer, where it writes the Ignition config to the target system with world-readable access permissions. This flaw allows a local attacker to have read access to potentially sensitive data. The highest threat from this vulnerability is to confidentiality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.7th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2022-08-23T19:03Z
EPSS history
Timeline
  • 23 AUG 19:03Z
    A flaw was found in the coreos-installer, where it writes the Ignition config to the target system with world-readable access permissions
    cvelistv5