CVE-2022-38065CWE-269

A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior

High · published December 21, 2022

CVSS v3.0
8.8
EPSS
1%
Percentile
49.3
In the wild
Unconfirmed
What it is

A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior. Overly permissive functionality within tools leveraging this library within a container can lead increased privileges.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00625 · 49.3th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2022-12-21T23:14Z
EPSS history
Timeline
  • 21 DEC 23:14Z
    A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior
    cvelistv5