CVE-2017-2622
Fixed in a distro release EPSS <1%CVSS 5.9
An accessibility flaw was found in the OpenStack Workflow (mistral) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.
Products: redhat openstack
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openstack 10 | openstack-mistral | 0:3.0.2-11.el7ost |
| Red Hat openstack 10 | openstack-mistral-all | 0:3.0.2-11.el7ost |
| Red Hat openstack 10 | openstack-mistral-api | 0:3.0.2-11.el7ost |
| Red Hat openstack 10 | openstack-mistral-common | 0:3.0.2-11.el7ost |
| Red Hat openstack 10 | openstack-mistral-engine | 0:3.0.2-11.el7ost |
| Red Hat openstack 10 | openstack-mistral-executor | 0:3.0.2-11.el7ost |
| Red Hat openstack 10 | python-mistral-tests | 0:3.0.2-11.el7ost |
| Red Hat openstack 10 | python-openstack-mistral | 0:3.0.2-11.el7ost |
| Ubuntu 20.04 LTS | mistral | no fix |
| Ubuntu 22.04 LTS | mistral | no fix |
| Ubuntu 24.04 LTS | mistral | no fix |
| Ubuntu 25.10 | mistral | no fix |
| Ubuntu 26.04 LTS | mistral | no fix |
| Ubuntu 26.10 | mistral | no fix |
| Ubuntu Pro 16.04 LTS | mistral | no fix |
| Ubuntu Pro 18.04 LTS | mistral | no fix |