CVE-2022-44020 — Improper Preservation of Permissions in Sushy-tools

CWE-281 — Improper Preservation of PermissionsCWE-305 — Authentication Bypass by Primary Weakness4 documents4 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 73.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Opendev Sushy-toolsOpendev VirtualbmcFedoraproject Fedora
Timeline
PublishedOct 30

Description

An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an "unsupported, production-like configuration."

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDopendev/sushy-tools< 0.21.1
▶PyPIopendev/sushy-tools< 0.21.1
▶NVDopendev/virtualbmc< 3.0.0
▶PyPIopendev/virtualbmc< 3.0.0

Also affects: Fedora 35, 36, 37

Patches

Patch: review.opendev.org ↗Patch: review.opendev.org ↗Patch: review.opendev.org ↗

🔴Vulnerability Details

2
GHSA
OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions↗2022-10-30
▶
OSV
OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions↗2022-10-30
▶

📋Vendor Advisories

1
Red Hat
VirtualBMC: removes password protection from the managed libvirt XML domain↗2022-10-26
▶
CVE-2022-44020 — Improper Preservation of Permissions | cvebase