Crowbar is a niche infrastructure provisioning and systems-management platform with a focused product portfolio centered on components such as Barclamp and Crowbar itself. Current exploitation activity, severity distribution, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Crowbar over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-0592HIGH Barclamp (aka barclamp-network) 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not enable netfilter on bridges when creating new instances, which allows remote attack | Apr 4, 2014 | 7.5 | 23 | NO | NO |
CVE-2012-0433MEDIUM The install-chef-suse.sh script shipped with crowbar before 2012-10-02 is creating files containing confidential data with insecure permissions, allowing local users to read confid | Jun 8, 2018 | 5.5 | 19 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Crowbar.
Media articles that mention a CVE ID that affects a product developed by Crowbar — matched by CVE ID, not by vendor name.