Known vulnerabilities in python-boto (Red Hat package)

Known vulnerabilities in python-boto (Red Hat package)

Vendor: Red Hat Inc.

Software: python-boto (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:python-boto_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 14

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU62796 - Incorrect Default Permissions CVE-2022-27652	CWE-276	Low	No	No	2.34.0-5.el7	04.05.2022	SB2022050416 SB2022050422 SB2022080148 and 1 more
#VU61291 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-0711	CWE-835	Medium	No	No	2.34.0-5.el7	14.03.2022	SB2022031420 SB2022031505 SB2022032910 and 8 more
#VU60644 - Exposure of sensitive information to an unauthorized actor CVE-2022-25184	CWE-200	Low	No	No	2.34.0-5.el7	16.02.2022	SB2022021609 SB2022032826 SB2022032910 and 4 more
#VU60643 - UNIX Symbolic Link (Symlink) Following CVE-2022-25179	CWE-61	Medium	No	No	2.34.0-5.el7	16.02.2022	SB2022021608 SB2022032826 SB2022032910 and 4 more
#VU60642 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-25175	CWE-78	Medium	No	No	2.34.0-5.el7	16.02.2022	SB2022021608 SB2022032826 SB2022032910 and 4 more
#VU60641 - Improper Control of Generation of Code ('Code Injection') CVE-2022-25183	CWE-94	Medium	No	No	2.34.0-5.el7	16.02.2022	SB2022021607 SB2022032826 SB2022032910 and 4 more
#VU60640 - Improper Control of Generation of Code ('Code Injection') CVE-2022-25182	CWE-94	Medium	No	No	2.34.0-5.el7	16.02.2022	SB2022021607 SB2022032826 SB2022032910 and 4 more
#VU60639 - Improper Control of Generation of Code ('Code Injection') CVE-2022-25181	CWE-94	Medium	No	No	2.34.0-5.el7	16.02.2022	SB2022021607 SB2022032826 SB2022032910 and 4 more
#VU60638 - UNIX Symbolic Link (Symlink) Following CVE-2022-25178	CWE-61	Medium	No	No	2.34.0-5.el7	16.02.2022	SB2022021607 SB2022032826 SB2022032910 and 4 more
#VU60637 - UNIX Symbolic Link (Symlink) Following CVE-2022-25177	CWE-61	Medium	No	No	2.34.0-5.el7	16.02.2022	SB2022021607 SB2022032826 SB2022032910 and 4 more
#VU60636 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-25174	CWE-78	Medium	No	No	2.34.0-5.el7	16.02.2022	SB2022021607 SB2022032826 SB2022032910 and 4 more
#VU60635 - Exposure of sensitive information to an unauthorized actor CVE-2022-25180	CWE-200	Low	No	No	2.34.0-5.el7	16.02.2022	SB2022021606 SB2022032826 SB2022032910 and 4 more
#VU60634 - UNIX Symbolic Link (Symlink) Following CVE-2022-25176	CWE-61	Medium	No	No	2.34.0-5.el7	16.02.2022	SB2022021606 SB2022032826 SB2022032910 and 4 more
#VU60633 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-25173	CWE-78	Medium	No	No	2.34.0-5.el7	16.02.2022	SB2022021606 SB2022032826 SB2022032910 and 4 more