An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an "unsupported, production-like configuration."

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the
    boot device configuration with these packages removes password protection from the managed libvirt XML
    domain. NOTE: this only affects an "unsupported, production-like configuration." (CVE-2022-44020)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-471e14677d advisory.

    Security fix for CVE-2022-44020

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-42723b43fe advisory.

    Security fix for CVE-2022-44020

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-72b8efd577 advisory.

    Security fix for CVE-2022-44020

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
421773	SCA: security update for sushy-tools, virtualbmc (GHSA-5pj3-6fqm-8m7m)	Tenable Cloud Security	SCA Checks	medium
421773	SCA: security update for sushy-tools, virtualbmc (GHSA-5pj3-6fqm-8m7m)	Tenable Self-Hosted Container Security	SCA Checks	medium
211122	Fedora 37 : python-virtualbmc (2022-471e14677d)	Nessus	Fedora Local Security Checks	medium
169192	Fedora 35 : python-virtualbmc (2022-42723b43fe)	Nessus	Fedora Local Security Checks	medium
169171	Fedora 36 : python-virtualbmc (2022-72b8efd577)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2022-44020

medium

Tenable Plugins

medium

medium

medium

medium

medium