CVE-2022-38060CWE-269

A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla git master 05194e7618

High · published December 21, 2022

CVSS v3.1
8.8
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla git master 05194e7618. A misconfiguration in /etc/sudoers within a container can lead to increased privileges.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00219 · 11.7th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2022-12-21T23:14Z
EPSS history
Timeline
  • 21 DEC 23:14Z
    A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla git master 05194e7618
    cvelistv5