[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3OSySLseOXdrrtS7OVYAeVKybdhqSwMR3NWY2-MQCBg":3,"g5a-risk:CVE-2017-2665":126},{"success":4,"data":5,"meta":124},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":15,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":59,"references":60,"referencesCount":59,"weaknesses":72,"weaknessesCount":27,"isActivelyExploited":81,"cisaInfo":15,"otxData":15,"relatedBlogPosts":82,"seoMetadata":83,"configurations":108,"relatedVendorCves":122,"notableEvents":123},"CVE-2017-2665","What is CVE-2017-2665?","The skyring-setup command creates random password for mongodb skyring database but it writes password in plain text to \u002Fetc\u002Fskyring\u002Fskyring.conf file which is owned by root but read by local user. Any local user who has access to system running skyring service will be able to get password in plain text.","The skyring-setup command creates random password for mongodb skyring database but it writes password in plain text to \u002Fetc\u002Fskyring\u002Fskyring.conf file which i...","2018-07-06T13:29:00.217","2019-10-09T23:27:03.1",7,"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":39,"CVSSMetricV40":15},null,[17,29],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","HIGH","LOW","NONE","UNCHANGED",1,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":37,"ImpactScore":38},"secalert@redhat.com","Secondary",{"Version":21,"VectorString":33,"AttackVector":22,"AttackComplexity":24,"PrivilegesRequired":24,"UserInteraction":34,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":36,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L","REQUIRED",4.8,"MEDIUM",1.3,3.4,[40],{"Source":18,"Type":19,"CVSSData":41,"BaseSeverity":24,"ExploitabilityScore":38,"ImpactScore":46,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":42,"VectorString":43,"AccessVector":22,"AccessComplexity":36,"Authentication":25,"ConfidentialityImpact":44,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":45,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:L\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",1.9,2.9,0.00327,[47,47,47,47,47,47,47],"High",[51,55],{"vendor":52,"product":52,"version":53,"criteria":54,"vulnerable":4},"mongodb","-","cpe:2.3:a:mongodb:mongodb:-:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":42,"criteria":58,"vulnerable":4},"redhat","storage_console","cpe:2.3:a:redhat:storage_console:2.0:*:*:*:*:*:*:*",2,[61,67],{"url":62,"source":63,"tags":64},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F97612","Securityfocus",[65,66],"Third Party Advisory","VDB Entry",{"url":68,"source":69,"tags":70},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2017-2665","Red Hat",[71,65],"Issue Tracking",[73],{"id":74,"name":75,"description":76,"extendedDescription":77,"status":78,"abstraction":79,"structure":80},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and\u002For retrieval.","","Incomplete","Class","Simple",false,[],{"title":84,"metaDescription":85,"keywords":86,"canonicalUrl":87,"structuredData":88},"What is CVE-2017-2665? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-2665, a high severity cyber security vulnerability from 2018. The skyring-setup command creates random password for mongod...","CVE-2017-2665, CVE-2017-2665 vulnerability, CVE-2017-2665 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, mongodb security, redhat security, mongodb vulnerability, storage_console vulnerability","\u002Fwhat-is\u002Fcve-2017-2665",{"@context":89,"@type":90,"headline":84,"description":85,"datePublished":10,"dateModified":11,"author":91,"publisher":95,"about":99,"mainEntityOfPage":103,"articleSection":106,"keywords":107},"https:\u002F\u002Fschema.org","TechArticle",{"@type":92,"name":93,"url":94},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":92,"name":93,"url":94,"logo":96},{"@type":97,"url":98},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":100,"name":6,"description":101,"additionalType":102},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":104,"@id":105},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-2665","Cybersecurity","CVE-2017-2665, CVE-2017-2665 vulnerability, CVE-2017-2665 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[109,116],{"Operator":15,"Negate":15,"Nodes":110},[111],{"Operator":112,"Negate":15,"CPEMatch":113},"OR",[114],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":115,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"54A50102-AB27-4077-A7B3-0E74EA1021F9",{"Operator":15,"Negate":15,"Nodes":117},[118],{"Operator":112,"Negate":15,"CPEMatch":119},[120],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":121,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E916298F-E4F3-49FB-92DA-C92013188C44",[],[],{"lastModified":11,"cacheTime":125,"version":42},1792265211585,{"score":127,"band":128,"action":129,"scoredAt":130},45,"Medium","Plan remediation","2026-10-16T06:44:23.48974+00:00"]