xCAT/xcat-core
2
0
Fork 0
mirror of https://github.com/xcat2/xcat-core.git synced 2025-08-19 17:50:20 +00:00
Code Issues Releases Wiki Activity

Added security advisory documentation for xCAT CVE-2023-27486 - zone permissions

Browse Source
This commit is contained in:
besawn
2023-03-08 13:02:28 -05:00
parent eb23d63076
commit 243e1e1b84
3 changed files with 26 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
docs/source/security/2023/20230308_xcat.rst Normal file
View File

@@ -0,0 +1,18 @@
2023-03-08 - xCAT Vulnerabilities
====================================
*Mar 8, 2023*, xCAT announced the following security advisory: https://github.com/xcat2/xcat-core/security/advisories/GHSA-hpxg-7428-6jvv
Advisory CVEs
-------------
* CVE-2023-27486 - **Insufficient authorization validation between zones when xCAT zones are enabled** (Severity: High)
Please see the security bulletin above for patch, upgrade, or suggested work around information.
Action
------
The issue described in CVE-2023-27486 only impacts users making use of the optional xCAT zones feature. xCAT zones are not enabled by default. Users making use of xCAT zones should upgrade to xCAT 2.16.5 or newer. Users that do not use xCAT zones are not impacted and do not need to upgrade.

7
docs/source/security/2023/index.rst Normal file
View File

@@ -0,0 +1,7 @@
2023 Notices
============
.. toctree::
:maxdepth: 1
20230308_xcat.rst

1
docs/source/security/index.rst
View File

@@ -4,6 +4,7 @@ Security Notices
.. toctree::
:maxdepth: 2
2023/index.rst
2018/index.rst
2017/index.rst
2016/index.rst