Github.Com Coreos Ignition vulnerabilities

1 known vulnerability affecting github.com/coreos_ignition.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2022-1706MEDIUM≥ 0, < 2.14.02022-05-25

CVE-2022-1706 [MEDIUM] CWE-200 Ignition config accessible to unprivileged software on VMware Ignition config accessible to unprivileged software on VMware ### Impact Unprivileged software in VMware VMs, including software running in unprivileged containers, can retrieve an Ignition config stored in a hypervisor guestinfo variable or OVF environment. If the Ignition config contains secrets, this can result in the compromise of sensitive information. ### Patches Ignition 2.14.0 and later [adds](