CVE-2022-37424

The FILES Directive allows arbitrary files from the frontend system (including sensitive files) to be included when a VM is started from that template, which may result in Information Disclosure. PUBLISHED

Description (CNA)

Files or Directories Accessible to External Parties vulnerability in OpenNebula on Linux allows File Discovery.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://opennebula.io/opennebula-6-4-2-ee-lts-maintenance-release-is-available/

ADP enrichment

CVE

No English description supplied.

https://opennebula.io/opennebula-6-4-2-ee-lts-maintenance-release-is-available/