Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 193

Export CSV
CVE-2018-10898

openstack-tripleo-heat-templates: Default ODL deployment uses hard coded administrative credentials

A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director using default configuration, Opendaylight in RHOSP13 is configured with easily guessable default credentials.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Tripleo Heat Templates Openstack
CVE-2017-7543

openstack-neutron: iptables not active after update

A race-condition flaw was discovered in openstack-neutron before 7.2.0-12.1, 8.x before 8.3.0-11.1, 9.x before 9.3.1-2.1, and 10.x before 10.0.2-1.1, where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an update, at which point an attacker could access exposed tenant VMs and network resources.

CVSS 3.0 · 5.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Openstack Redhat
Products
Neutron Enterprise Linux Openstack
CVE-2017-2627

openstack-tripleo-common: sudoers file is too permissive

A flaw was found in openstack-tripleo-common as shipped with Red Hat Openstack Enterprise 10 and 11. The sudoers file as installed with OSP's openstack-tripleo-common package is much too permissive. It contains several lines for the mistral user that have wildcards that allow directory traversal with '..' and it grants full passwordless root access to the validations user.

CVSS 3.0 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Tripleo-common Openstack
CVE-2017-2621

openstack-heat: /var/log/heat/ is world readable

An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Heat Openstack
CVE-2017-2592

python-oslo-middleware: CatchErrors leaks sensitive values into error logs

python-oslo-middleware before versions 3.8.1, 3.19.1, 3.23.1 is vulnerable to an information disclosure. Software using the CatchError class could include sensitive values in a traceback's error message. System users could exploit this flaw to obtain sensitive information from OpenStack component error logs (for example, keystone tokens).

CVSS 3.0 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Oslo.middleware Openstack
CVE-2017-18191

openstack-nova: Swapping encrypted volumes can allow an attacker to corrupt the LUKS header causing a denial of service in the host

An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt the LUKS header, resulting in a denial of service attack on the compute host. (The same code error also results in data loss, but that is not a vulnerability because the user loses their own data.) All Nova setups supporting encrypted volumes are affected.

CVSS 3.0 · 7.5 High EPSS 3.7% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Openstack
CVE-2017-15139

openstack-cinder: Data retained after deletion of a ScaleIO volume

A vulnerability was found in openstack-cinder releases up to and including Queens, allowing newly created volumes in certain storage volume configurations to contain previous data. It specifically affects ScaleIO volumes using thin volumes and zero padding. This could lead to leakage of sensitive information between tenants.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Openstack Redhat
Products
Cinder Openstack
CVE-2016-9599

puppet-tripleo: if ssl is enabled, traffic is open on both undercloud and overcloud

puppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the IPtables rules management, which allowed the creation of TCP/UDP rules with empty port values. If SSL is enabled, a malicious user could use these open ports to gain access to unauthorized resources.

CVSS 3.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Puppet-tripleo Openstack
CVE-2016-9590

puppet-swift: installs config file with world readable permissions

puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage (swift). During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf file with world-readable permissions.

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Openstack Redhat
Products
Puppet-swift Openstack
CVE-2013-2255

openstack-*: Inconsistent and non-validating HTTPS client

HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Openstack Redhat
Products
Debian Linux Compute Keystone and 1 more
CVE-2012-5474

OpenStack: Dashboard /etc/openstack-dashboard/local_settings secret key exposure

The file /etc/openstack-dashboard/local_settings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release (python-django-horizon package before 2012.1.1) is world readable and exposes the secret key value.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Openstack and 1 more
Products
Debian Linux Fedora Horizon and 1 more