https://bugzilla.redhat.com/show_bug.cgi?id=1454808
Hooman Broujerdi <hghasemb(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=moderate,public=2017 |impact=moderate,public=2017
|0207,reported=20170520,sour |0207,reported=20170520,sour
|ce=internet,cvss3=7.5/CVSS: |ce=internet,cvss3=7.5/CVSS:
|3.0/AV:N/AC:L/PR:N/UI:N/S:U |3.0/AV:N/AC:L/PR:N/UI:N/S:U
|/C:N/I:N/A:H,cwe=CWE-20,fed |/C:N/I:N/A:H,cwe=CWE-20,fed
|ora-all/zookeeper=affected, |ora-all/zookeeper=affected,
|amq-6/zookeeper=affected,bp |amq-6/zookeeper=wontfix,bpm
|ms-6/zookeeper=affected,brm |s-6/zookeeper=affected,brms
|s-6/zookeeper=affected,jdv- |-6/zookeeper=affected,jdv-6
|6/zookeeper=affected,fuse-6 |/zookeeper=affected,fuse-6/
|/zookeeper=affected,openshi |zookeeper=wontfix,openshift
|ft-enterprise-2/zookeeper=n |-enterprise-2/zookeeper=new
|ew |
--- Comment #6 from Hooman Broujerdi <hghasemb(a)redhat.com> ---
For fuse the recommended security practice to mitigate this issue is to deploy
and operate zookeeper in a secured network where essentially the affected port
are protected by the firewall. Additionally it should be assumed that only
admin has access to the affected port and this port should not be made
available to the world.
--
You are receiving this mail because:
You are on the CC list for the bug.