Spi-inc

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Spi-inc records in CISA KEV

No Spi-inc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ganeti 3 records MEDIUM

Records

3 records

TI-2015-06610 CVE-2015-7944 · GHSA-g6j6-f58r-vgxm

The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x…

MEDIUM 48

The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2, when…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.14199 Published 2017-08-18 No fix listed CWE-399

TI-2015-06611 CVE-2015-7945 · GHSA-2rx4-8xc8-6hf3

The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x…

MEDIUM 45

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.09356 Published 2017-08-18 No fix listed CWE-200

TI-2014-04282 CVE-2014-5247 · GHSA-rqwx-x2jv-r288

The _UpgradeBeforeConfigurationChange function in lib/client/gnt_cluster.py in Ganeti…

LOW 12

The _UpgradeBeforeConfigurationChange function in lib/client/gnt_cluster.py in Ganeti 2.10.0 before 2.10.7 and 2.11.0 before 2.11.5 uses world-readable permissions for the configuration backup file, which allows local us…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00491 Published 2014-08-29 No fix listed CWE-264

Open these records in search →

Critical	0
High	2
Medium	0
Low	1
No CVSS	0