Red Hat Security AdvisoryRHSA-2019:0638
openwsman security update
Released 2019-03-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libwsman1-2.6.3-6.git4391e5c.el7_6, openwsman-2.6.3-6.git4391e5c.el7_6, openwsman-client-2.6.3-6.git4391e5c.el7_6 +1
- Red Hat Enterprise Linux Client Optional (v. 7) libwsman-devel-2.6.3-6.git4391e5c.el7_6, openwsman-perl-2.6.3-6.git4391e5c.el7_6, openwsman-python-2.6.3-6.git4391e5c.el7_6 +1
- Red Hat Enterprise Linux ComputeNode (v. 7) libwsman1-2.6.3-6.git4391e5c.el7_6, openwsman-2.6.3-6.git4391e5c.el7_6, openwsman-client-2.6.3-6.git4391e5c.el7_6 +2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libwsman-devel-2.6.3-6.git4391e5c.el7_6, openwsman-perl-2.6.3-6.git4391e5c.el7_6, openwsman-ruby-2.6.3-6.git4391e5c.el7_6
- Red Hat Enterprise Linux Server (v. 7) libwsman1-2.6.3-6.git4391e5c.el7_6, libwsman1-2.6.3-6.git4391e5c.el7_6.ppc, openwsman-2.6.3-6.git4391e5c.el7_6 +5
- Red Hat Enterprise Linux Server Optional (v. 7) libwsman-devel-2.6.3-6.git4391e5c.el7_6, libwsman-devel-2.6.3-6.git4391e5c.el7_6.ppc, openwsman-perl-2.6.3-6.git4391e5c.el7_6 +1
- Red Hat Enterprise Linux Workstation (v. 7) libwsman1-2.6.3-6.git4391e5c.el7_6, openwsman-2.6.3-6.git4391e5c.el7_6, openwsman-client-2.6.3-6.git4391e5c.el7_6 +2
- Red Hat Enterprise Linux Workstation Optional (v. 7) libwsman-devel-2.6.3-6.git4391e5c.el7_6, openwsman-perl-2.6.3-6.git4391e5c.el7_6, openwsman-ruby-2.6.3-6.git4391e5c.el7_6
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) libwsman1-2.6.3-6.git4391e5c.el7_6, openwsman-2.6.3-6.git4391e5c.el7_6, openwsman-client-2.6.3-6.git4391e5c.el7_6 +2
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) libwsman-devel-2.6.3-6.git4391e5c.el7_6, openwsman-perl-2.6.3-6.git4391e5c.el7_6, openwsman-ruby-2.6.3-6.git4391e5c.el7_6
Fixes 1 record
Priority MEDIUM 48
Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.14739 · Published 2019-03-14 · Partial fix CWE-22
