CVE-2022-37424

The FILES Directive allows arbitrary files from the frontend system (including sensitive files) to be included when a VM is started from that template, which may result in Information Disclosure.

Medium · published October 28, 2022

CVSS v3.1
6.5
EPSS
1%
Percentile
56.1
In the wild
Unconfirmed
What it is

Files or Directories Accessible to External Parties vulnerability in OpenNebula on Linux allows File Discovery.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00797 · 56.1th percentile
Published
2022-10-28T15:09Z
EPSS history
Timeline
  • 28 OCT 15:09Z
    The FILES Directive allows arbitrary files from the frontend system (including sensitive files) to be included when a VM is started from that template, which may result in Information Disclosure.
    cvelistv5