There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The _write_config function in trove/guestagent/datastore/experimental/mongodb/service.py,
    reset_configuration function in trove/guestagent/datastore/experimental/postgresql/service/config.py,
    write_config function in trove/guestagent/datastore/experimental/redis/service.py, _write_mycnf function
    in trove/guestagent/datastore/mysql/service.py, InnoBackupEx::_run_prepare function in
    trove/guestagent/strategies/restore/mysql_impl.py, InnoBackupEx::cmd function in
    trove/guestagent/strategies/backup/mysql_impl.py, MySQLDump::cmd in
    trove/guestagent/strategies/backup/mysql_impl.py, InnoBackupExIncremental::cmd function in
    trove/guestagent/strategies/backup/mysql_impl.py, _get_actual_db_status function in
    trove/guestagent/datastore/experimental/cassandra/system.py and
    trove/guestagent/datastore/experimental/cassandra/service.py, and multiple class CbBackup methods in
    trove/guestagent/strategies/backup/experimental/couchbase_impl.py in Openstack DBaaS (aka Trove) as
    packaged in Openstack before 2015.1.0 (aka Kilo) allows local users to write to configuration files via a
    symlink attack on a temporary file. (CVE-2015-3156)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - trove/guestagent/datastore/experimental/mongodb/service.py 中的 _write_config 函式、trove/guestagent/datastore/experimental/postgresql/service/config.py 中的 reset_configuration 函式、trove/guestagent/datastore/experimental/redis 中的 write_config 函式/service.py、trove/guestagent/datastore/mysql/service.py 中的 _write_mycnf 函式、trove/guestagent/strategies/restore/mysql_impl.py 中的 InnoBackupEx::_run_prepare 函式、trove/guestagent/strategies/ 中的 InnoBackupEx::cmd 函式backup/mysql_impl.py、trove/guestagent/strategies/backup/mysql_impl.py 中的 MySQLDump::cmd、trove/guestagent/strategies/backup/mysql_impl.py 中的 InnoBackupExIncremental::cmd 函式、trove/guestagent/datastore/ 中的 _get_actual_db_status 函式封裝後的 Openstack DBaaS (即 Trove) 中的 experimental/cassandra/system.py 和 trove/guestagent/datastore/experimental/cassandra/service.py，以及 trove/guestagent/strategies/backup/experimental/couchbase_impl.py 中的多個類別 CbBackup 方法在 Openstack 中ore 2015.1.0 (即 Kilo) 允許本機使用者透過對暫存檔案發動符號連結攻擊，寫入設定檔。 (CVE-2015-3156)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - trove/guestagent/datastore/experimental/mongodb/service.py 中的 _write_config 函数、trove/guestagent/datastore/experimental/postgresql/service/config.py 中的 reset_configuration 函数、trove/guestagent/datastore/experimental/redis 中的 write_config 函数/service.py、trove/guestagent/datastore/mysql/service.py 中的 _write_mycnf 函数、trove/guestagent/strategies/restore/mysql_impl.py 中的 InnoBackupEx::_run_prepare 函数、trove/guestagent/strategies/ 中的 InnoBackupEx::cmd 函数backup/mysql_impl.py、trove/guestagent/strategies/backup/mysql_impl.py 中的 MySQLDump::cmd、trove/guestagent/strategies/backup/mysql_impl.py 中的 InnoBackupExIncremental::cmd 函数、trove/guestagent/datastore/ 中的 _get_actual_db_status 函数在 Openstack DBaaS（又称为 Trove）中打包的 trove/guestagent/strategies/backup/experimental/couchbase_impl.py 中的 experimental/cassandra/system.py 和 trove/guestagent/datastore/experimental/cassandra/service.py 以及多种类 CbBackup 方法在 Openstack bef 中ore 2015.1.0 （又称为 Kilo）允许本地用户通过针对临时文件的符号链接攻击来写入配置文件。 (CVE-2015-3156)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - trove/guestagent/datastore/experimental/mongodb/service.py の _write_config 関数、trove/guestagent/datastore/experimental/postgresql/service/config.py の reset_configuration 関数、trove/guestagent/datastore/experimental/redis の write_config 関数/service.py、trove/guestagent/datastore/mysql/service.py の _write_mycnf 関数、trove/guestagent/strategies/restore/mysql_impl.py の InnoBackupEx::_run_prepare 関数、trove/guestagent/strategies/ の InnoBackupEx::cmd 関数backup/mysql_impl.py、trove/guestagent/strategies/backup/mysql_impl.py の MySQLDump::cmd、trove/guestagent/strategies/backup/mysql_impl.py の InnoBackupExIncremental::cmd 関数、trove/guestagent/datastore/ の _get_actual_db_status 関数Experimental/cassandra/system.py および trove/guestagent/datastore/experimental/cassandra/service.py、ならびにパッケージ化された Openstack DBaaS（別名 Trove）の trove/guestagent/strategies/backup/experimental/couchbase_impl.py の複数のクラス CbBackup メソッドOpenstack bef でore 2015.1.0 （別名 Kilo）により、ローカルユーザーは、一時ファイルへのシンボリックリンク攻撃を介して構成ファイルに書き込むことができます。 （CVE-2015-3156）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The _write_config function in trove/guestagent/datastore/experimental/mongodb/service.py,     reset_configuration function in trove/guestagent/datastore/experimental/postgresql/service/config.py,     write_config function in trove/guestagent/datastore/experimental/redis/service.py, _write_mycnf function     in trove/guestagent/datastore/mysql/service.py, InnoBackupEx::_run_prepare function in     trove/guestagent/strategies/restore/mysql_impl.py, InnoBackupEx::cmd function in     trove/guestagent/strategies/backup/mysql_impl.py, MySQLDump::cmd in     trove/guestagent/strategies/backup/mysql_impl.py, InnoBackupExIncremental::cmd function in     trove/guestagent/strategies/backup/mysql_impl.py, _get_actual_db_status function in     trove/guestagent/datastore/experimental/cassandra/system.py and     trove/guestagent/datastore/experimental/cassandra/service.py, and multiple class CbBackup methods in     trove/guestagent/strategies/backup/experimental/couchbase_impl.py in Openstack DBaaS (aka Trove) as     packaged in Openstack before 2015.1.0 (aka Kilo) allows local users to write to configuration files via a     symlink attack on a temporary file. (CVE-2015-3156)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
434745	SCA: security update for trove (GHSA-98c8-36p9-gw66)	Tenable Self-Hosted Container Security	SCA Checks	8/19/2025	7/2/2026	medium
434745	SCA: security update for trove (GHSA-98c8-36p9-gw66)	Tenable Cloud Security	SCA Checks	8/19/2025	7/2/2026	medium
218860	Linux Distros 未修補弱點：CVE-2015-3156	Nessus	Misc.	3/4/2025	9/6/2026	medium
218860	Linux Distros 未修补的漏洞: CVE-2015-3156	Nessus	Misc.	3/4/2025	9/6/2026	medium
218860	Linux Distros のパッチ未適用の脆弱性: CVE-2015-3156	Nessus	Misc.	3/4/2025	9/6/2026	medium
218860	Linux Distros Unpatched Vulnerability : CVE-2015-3156	Nessus	Misc.	3/4/2025	9/6/2026	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium