Vulnerabilities > Redhat > Coreos Installer

DATE CVE VULNERABILITY TITLE RISK
2022-08-23 CVE-2021-3917 Incorrect Default Permissions vulnerability in Redhat Coreos-Installer
A flaw was found in the coreos-installer, where it writes the Ignition config to the target system with world-readable access permissions.
local
low complexity
redhat CWE-276
5.5
2022-03-04 CVE-2021-20319 Improper Verification of Cryptographic Signature vulnerability in Redhat Coreos-Installer 0.10.0
An improper signature verification vulnerability was found in coreos-installer.
local
low complexity
redhat CWE-347
7.8