https://bugzilla.redhat.com/show_bug.cgi?id=1244238
Kurt Seifried <kseifried(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=moderate,public=2015 |impact=low,public=20150716,
|0716,reported=20150717,sour |reported=20150717,source=in
|ce=internet,cvss2=4.3/AV:N/ |ternet,cvss2=1.9/AV:L/AC:M/
|AC:M/Au:N/C:P/I:N/A:N,fedor |Au:N/C:P/I:N/A:N,fedora-all
|a-all/elasticsearch=affecte |/elasticsearch=affected,rhn
|d,rhn_satellite_6/elasticse |_satellite_6/elasticsearch=
|arch=notaffected,sam-1/elas |notaffected,sam-1/elasticse
|ticsearch=notaffected |arch=notaffected
--- Comment #2 from Kurt Seifried <kseifried(a)redhat.com> ---
Updating the severity, for Sam 1.x elasticsearch only listens on localhost,
thus local access is required. For Satellite 6.x the installation process
should include firewalling it to trusted local users only. As such this only
scores 1.9 instead of 5.8 on the CVSS2 scoring.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=idiakd2NlQ&a=cc_unsubscribe