CVE-2022-38065: High severity redhat Openstack vulnerability
Published Dec 21, 2022
·Updated
A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior. Overly permissive functionality within tools leveraging this library within a container can lead increased privileges.
Affected Software
5 affected components
redhat Openstack
debian/python-oslo.privsep*
debian/python-oslo.privsep*
debian/python-oslo.privsep*
debian/python-oslo.privsep<=3.0.1-2, <=3.6.0-3, <=3.12.0-3
Event History
Dec 21, 2022
CVE Published
11:15 AM
Data Sourced
via OSV·11:15 AM
DescriptionSeverityAffected Software
CVE Published
via MITRE·11:14 PM
Data Sourced
via MITRE·11:14 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this privilege escalation vulnerability?
The vulnerability ID for this privilege escalation vulnerability is CVE-2022-38065.
2
What is the severity rating of CVE-2022-38065?
CVE-2022-38065 has a severity rating of 8.8, which is considered high.
3
What is the affected software for CVE-2022-38065?
The affected software for CVE-2022-38065 is Redhat Openstack.
4
What is the CWE ID for this vulnerability?
The CWE ID for this vulnerability is 269.
5
How can I fix the privilege escalation vulnerability CVE-2022-38065?
To fix the privilege escalation vulnerability CVE-2022-38065, it is recommended to update to a version of OpenStack that includes the fix for this issue.