{"id":"CVE-2022-44020","aliases":["EUVD-2022-7030","GHSA-5pj3-6fqm-8m7m","PYSEC-2026-1059","PYSEC-2026-3079","RHSA-2022:8896"],"status":"published","title":"OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions","description":"An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an \"unsupported, production-like configuration.\"","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00241,"percentile":0.15314,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-281"],"published":"2022-10-29T00:00:00Z","modified":"2026-10-28T02:30:59Z","fixes":[{"ecosystem":"PyPI","package":"sushy-tools","fixed_in":["0.21.1"],"sources":["ghsa","osv"]},{"ecosystem":"PyPI","package":"virtualbmc","fixed_in":["3.0.0"],"sources":["ghsa","osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"python-virtualbmc","fixed_in":["0:1.2.0-2.el7ost"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"sushy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.1"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"virtualbmc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0"}]}]},{"source":"osv","ecosystem":"PyPI","package":"sushy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.1"}]}],"versions":["0.0.0","0.1.0","0.10.0","0.11.0","0.11.1","0.12.0","0.12.1","0.13.0","0.14.0","0.15.0","0.16.0","0.17.0","0.18.0","0.18.1","0.18.2","0.19.0","0.2.0","0.20.0","0.21.0","0.3.0","0.4.0","0.5.0","0.6.0","0.7.0","0.8.0","0.9.0"]},{"source":"osv","ecosystem":"PyPI","package":"virtualbmc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0"}]}],"versions":["0.0.1","0.0.2","0.0.3","0.0.4","0.1.0","1.0.0","1.1.0","1.2.0","1.3.0","1.4.0","1.5.0","1.6.0","2.0.0","2.1.0","2.2.0","2.2.1","2.2.2"]},{"source":"osv","ecosystem":"PyPI","package":"virtualbmc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0"}]}],"versions":["0.0.1","0.0.2","0.0.3","0.0.4","0.1.0","1.0.0","1.1.0","1.2.0","1.3.0","1.4.0","1.5.0","1.6.0","2.0.0","2.1.0","2.2.0","2.2.1","2.2.2"]},{"source":"osv","ecosystem":"PyPI","package":"sushy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.1"}]}],"versions":["0.0.0","0.1.0","0.10.0","0.11.0","0.11.1","0.12.0","0.12.1","0.13.0","0.14.0","0.15.0","0.16.0","0.17.0","0.18.0","0.18.1","0.18.2","0.19.0","0.2.0","0.20.0","0.21.0","0.3.0","0.4.0","0.5.0","0.6.0","0.7.0","0.8.0","0.9.0"]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"python-virtualbmc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-2.el7ost"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"opendev","product":"sushy-tools"},{"vendor":"opendev","product":"virtualbmc"}],"references":[{"url":"https://storyboard.openstack.org/#%21/story/2010382","tags":["x_transferred","web"]},{"url":"https://review.opendev.org/c/openstack/virtualbmc/+/862620","tags":["x_transferred","Patch","Vendor Advisory","web","article"]},{"url":"https://review.opendev.org/c/openstack/sushy-tools/+/862625","tags":["x_transferred","Patch","Vendor Advisory","web","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEQVJF3OQGSDCSQTQQSC54JEGLMSNB4Q/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GAD7QJIUWPCKJIGYP7PPHH5DILOEONFE/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMSUGS4B6EBRHBJMTRXL5RIKJTZTEMJC/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-44020","tags":["advisory"]},{"url":"https://storyboard.openstack.org/#!/story/2010382","tags":["web","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GAD7QJIUWPCKJIGYP7PPHH5DILOEONFE","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEQVJF3OQGSDCSQTQQSC54JEGLMSNB4Q","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QMSUGS4B6EBRHBJMTRXL5RIKJTZTEMJC","tags":["web"]},{"url":"https://github.com/advisories/GHSA-5pj3-6fqm-8m7m","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/44xxx/CVE-2022-44020.json","tags":["advisory"]},{"url":"https://github.com/umago/virtualbmc","tags":["package"]},{"url":"https://pypi.org/project/virtualbmc","tags":["package"]},{"url":"https://pypi.org/project/sushy-tools","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8896","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2142678","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8896.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-44020","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-44020","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-44020","description":"An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an \"unsupported, production-like configuration.\"","status":"published","published":"2022-10-29T00:00:00Z","modified":"2025-05-07T13:57:26.002Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-281"],"updated_at":"2026-11-02T14:34:30.176321Z"}],"euvd":[{"id":"EUVD-2022-7030","description":"An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an \"unsupported, production-like configuration.\"","status":"published","published":"2022-10-29T00:00:00Z","modified":"2025-05-07T13:57:26Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T20:32:53.482549Z"}],"ghsa":[{"id":"GHSA-5pj3-6fqm-8m7m","title":"OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions","description":"An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an \"unsupported, production-like configuration.\"","status":"published","published":"2022-10-30T12:00:28Z","modified":"2024-04-22T22:35:39Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-281"],"updated_at":"2026-11-02T14:37:44.335614Z"}],"nvd":[{"id":"CVE-2022-44020","description":"An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an \"unsupported, production-like configuration.\"","status":"published","published":"2022-10-30T00:15:10.13Z","modified":"2026-06-17T05:07:40.847Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-281"],"updated_at":"2026-11-02T14:07:31.127985Z"}],"osv":[{"id":"CVE-2022-44020","description":"An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an \"unsupported, production-like configuration.\"","status":"published","published":"2022-10-29T00:00:00Z","modified":"2026-10-28T02:30:59.39625182Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:27.481647Z"},{"id":"GHSA-5pj3-6fqm-8m7m","title":"OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions","description":"An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an \"unsupported, production-like configuration.\"","status":"published","published":"2022-10-30T12:00:28Z","modified":"2026-07-13T16:43:10.364039839Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-281"],"updated_at":"2026-11-02T15:46:38.553953Z"},{"id":"PYSEC-2026-1059","title":"OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions","description":"An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an \"unsupported, production-like configuration.\"","status":"published","published":"2026-07-07T10:17:22.957829Z","modified":"2026-07-13T16:43:10.364039839Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:54.622769Z"},{"id":"PYSEC-2026-3079","title":"OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions","description":"An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an \"unsupported, production-like configuration.\"","status":"published","published":"2026-07-13T14:19:51.257683Z","modified":"2026-07-13T16:43:10.364039839Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:56.429374Z"},{"id":"RHSA-2022:8896","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 13.0 (python-virtualbmc) security update","status":"published","published":"2024-09-13T21:04:01Z","modified":"2026-06-29T10:44:51Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"}]}}