CVE-2022-44020 - OpenCVE

An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an "unsupported, production-like configuration."

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Opendev	Sushy-tools Virtualbmc
Fedoraproject	Fedora

Configuration 1 [-]

OR	cpe:2.3:a:opendev:sushy-tools::::::openstack::*
	cpe:2.3:a:opendev:virtualbmc::::::openstack::*

Configuration 2 [-]

OR	cpe:2.3:o:fedoraproject:fedora:35:::::::*
	cpe:2.3:o:fedoraproject:fedora:36:::::::*
	cpe:2.3:o:fedoraproject:fedora:37:::::::*

References

Link	Resource
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GAD7QJIUWPCKJIGYP7PPHH5DILOEONFE/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEQVJF3OQGSDCSQTQQSC54JEGLMSNB4Q/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMSUGS4B6EBRHBJMTRXL5RIKJTZTEMJC/
https://review.opendev.org/c/openstack/sushy-tools/+/862625	Patch Vendor Advisory
https://review.opendev.org/c/openstack/virtualbmc/+/862620	Patch Vendor Advisory
https://storyboard.openstack.org/#%21/story/2010382

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2022-10-29T00:00:00

Updated: 2022-11-29T00:00:00

Reserved: 2022-10-29T00:00:00

Link: CVE-2022-44020

JSON object: View

NVD Information

Status : Modified

Published: 2022-10-30T00:15:10.130

Modified: 2023-11-07T03:54:12.503

Link: CVE-2022-44020

JSON object: View

Redhat Information

No data.

CWE

CWE-281

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:opendev:sushy-tools:*:*:*:*:*:openstack:*:*", "matchCriteriaId": "938C0F4E-3047-4D86-A93B-F40DD99F4A75", "versionEndExcluding": "0.21.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:opendev:virtualbmc:*:*:*:*:*:openstack:*:*", "matchCriteriaId": "5DB1A94B-21DF-4E56-97C3-6F25F61D42F3", "versionEndExcluding": "3.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*", "matchCriteriaId": "80E516C0-98A4-4ADE-B69F-66A772E2BAAA", "vulnerable": true}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*", "matchCriteriaId": "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD", "vulnerable": true}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*", "matchCriteriaId": "E30D0E6F-4AE8-4284-8716-991DFA48CC5D", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an \"unsupported, production-like configuration.\""}, {"lang": "es", "value": "Se descubri\u00f3 un problema en OpenStack Sushy-Tools hasta 0.21.0 y VirtualBMC hasta 2.2.2. Cambiar la configuraci\u00f3n del dispositivo de arranque con estos paquetes elimina la protecci\u00f3n con contrase\u00f1a del dominio XML libvirt administrado. NOTA: esto s\u00f3lo afecta a una \"\"unsupported, production-like configuration\"\".\n"}], "id": "CVE-2022-44020", "lastModified": "2023-11-07T03:54:12.503", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-10-30T00:15:10.130", "references": [{"source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GAD7QJIUWPCKJIGYP7PPHH5DILOEONFE/"}, {"source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEQVJF3OQGSDCSQTQQSC54JEGLMSNB4Q/"}, {"source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMSUGS4B6EBRHBJMTRXL5RIKJTZTEMJC/"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "https://review.opendev.org/c/openstack/sushy-tools/+/862625"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "https://review.opendev.org/c/openstack/virtualbmc/+/862620"}, {"source": "cve@mitre.org", "url": "https://storyboard.openstack.org/#%21/story/2010382"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-281"}], "source": "nvd@nist.gov", "type": "Primary"}]}