CVE-2022-38060
High
Description
A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla git master 05194e7618. A misconfiguration in /etc/sudoers within a container can lead to increased privileges.
SeverityHigh
CVSS8.8
Exploit probability—
ProductOpenstack Kolla
PublishedDec 21, 2022
First seenDec 21, 2022
Weakness typeCWE-269Improper privilege management
How to fix
Update
- kolla15.0.0.0rc1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openstack kolla | No range specified | — |
| kollaPyPI | v < 15.0.0.0rc1 | 15.0.0.0rc1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.