Crowbar Project maintains a niche bare-metal provisioning and infrastructure-management platform, with its vulnerability footprint centered on the core Crowbar product and its deployment automation role. The durable signal involves information-exposure and access-control weaknesses characteristic of tools that handle credentials, configurations, and orchestration across managed infrastructure. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Crowbar Project over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-0592HIGH Barclamp (aka barclamp-network) 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not enable netfilter on bridges when creating new instances, which allows remote attack | Apr 4, 2014 | 7.5 | 23 | NO | NO |
CVE-2012-0433MEDIUM The install-chef-suse.sh script shipped with crowbar before 2012-10-02 is creating files containing confidential data with insecure permissions, allowing local users to read confid | Jun 8, 2018 | 5.5 | 19 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Crowbar Project.
Media articles that mention a CVE ID that affects a product developed by Crowbar Project — matched by CVE ID, not by vendor name.