Skip to content

CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-37424

The FILES Directive allows arbitrary files from the frontend system (including sensitive files) to be included when a VM is started from that template, which may result in Information Disclosure.

Read JSON ↗CVE.org ↗

Status: Published
Published: 2022-10-28
Updated: 2024-08-03
Assigning organization: blackberry

Description

Files or Directories Accessible to External Parties vulnerability in OpenNebula on Linux allows File Discovery.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a n/a

n/aaffected

References

https://opennebula.io/opennebula-6-4-2-ee-lts-maintenance-release-is-available/ ↗