Red Hat Security AdvisoryRHSA-2019:0972
openwsman security update
Released 2019-05-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) libwsman-devel-2.6.5-5.el8
- Red Hat Enterprise Linux AppStream (v. 8) libwsman1-2.6.5-5.el8, openwsman-2.6.5-5.el8, openwsman-client-2.6.5-5.el8 +2
Fixes 1 record
Priority MEDIUM 48
Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.14739 · Published 2019-03-14 · Partial fix CWE-22
