https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T15:01:46.518453+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-100636 EUVD-2026-100636 2026-10-27T15:01:46.521581+00:00 EUVD-2026-100636 https://cve.radiocsirt.org/vuln/fkie_cve-2014-5247 fkie_cve-2014-5247 2026-10-27T15:01:46.521622+00:00

The _UpgradeBeforeConfigurationChange function in lib/client/gnt_cluster.py in Ganeti 2.10.0 before 2.10.7 and 2.11.0 before 2.11.5 uses world-readable permissions for the configuration backup file, which allows local users to obtain SSL keys, remote API credentials, and other sensitive information by reading the file, related to the upgrade command.

 https://cve.radiocsirt.org/vuln/ghsa-rqwx-x2jv-r288 GHSA-rqwx-x2jv-r288 2026-10-27T15:01:46.521652+00:00

The _UpgradeBeforeConfigurationChange function in lib/client/gnt_cluster.py in Ganeti 2.10.0 before 2.10.7 and 2.11.0 before 2.11.5 uses world-readable permissions for the configuration backup file, which allows local users to obtain SSL keys, remote API credentials, and other sensitive information by reading the file, related to the upgrade command.

 https://cve.radiocsirt.org/vuln/gsd-2014-5247 gsd-2014-5247 2026-10-27T15:01:46.521671+00:00 gsd-2014-5247 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-5247 Withdrawn: UBUNTU-CVE-2014-5247 2026-10-27T15:01:46.521682+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: ganeti

The _UpgradeBeforeConfigurationChange function in lib/client/gnt_cluster.py in Ganeti 2.10.0 before 2.10.7 and 2.11.0 before 2.11.5 uses world-readable permissions for the configuration backup file, which allows local users to obtain SSL keys, remote API credentials, and other sensitive information by reading the file, related to the upgrade command.