high7.5
CVE-2017-1000199
tcmu-runner version 0.91 up to 1.20 is vulnerable to information disclosure in handler_qcow.so resulting in non-privileged users being able to check for existe…
Impact
tcmu-runner version 0.91 up to 1.20 is vulnerable to information disclosure in handler_qcow.so resulting in non-privileged users being able to check for existence of any file with root privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tcmu-Runner Project | Tcmu-Runner | Versions 0.9.1, 0.9.2, 0.9.3, 0.9.4, 1.0.5, 1.1.0 |