Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 340

Export CSV
CVE-2015-5271

openstack-tripleo-heat-templates: unsafe pipeline ordering of swift staticweb middleware

The TripleO Heat templates (tripleo-heat-templates) do not properly order the Identity Service (keystone) before the OpenStack Object Storage (Swift) staticweb middleware in the swiftproxy pipeline when the staticweb middleware is enabled, which might allow remote attackers to obtain sensitive information from private containers via unspecified vectors.

CVSS 3.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Openstack Redhat
Products
Tripleo Heat Templates Openstack Openstack-director
CVE-2015-5286

openstack-glance: Storage overrun by deleting images

OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting images that are being uploaded using a token that expires during the process. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-9623.

CVSS 2.0 · 6.8 Medium EPSS 2.5% KEV · Not listed
Vendors
Openstack Redhat
Products
Image Registry And Delivery Service \(glance\) Openstack
CVE-2015-5295

openstack-heat: Vulnerability in Heat template validation leading to DoS

The template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5.0.x before 5.0.1 (liberty) allows remote authenticated users to cause a denial of service (memory consumption) or determine the existence of local files via the resource type in a template, as demonstrated by file:///dev/zero.

CVSS 3.0 · 5.4 Medium EPSS 2.9% KEV · Not listed
Vendors
Fedoraproject Openstack Oracle and 1 more
Products
Fedora Orchestration Api Solaris and 1 more
CVE-2015-5303

python-rdomanager-oscplugin: NeutronMetadataProxySharedSecret parameter uses default value

The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.

CVSS 3.0 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Openstack Redhat
Products
Tripleo Heat Templates Openstack-director
CVE-2015-5306

openstack-ironic-discoverd: potential remote code execution with debug mode enabled

OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error.

CVSS 2.0 · 6.8 Medium EPSS 1.6% KEV · Not listed
Vendors
Openstack Redhat
Products
Ironic Inspector Openstack Openstack-director
CVE-2015-7546

openstack-keystone: Improper check of tampered revocated PKI/PKIZ token

The identity service in OpenStack Identity (Keystone) before 2015.1.3 (Kilo) and 8.0.x before 8.0.2 (Liberty) and keystonemiddleware (formerly python-keystoneclient) before 1.5.4 (Kilo) and Liberty before 2.3.3 does not properly invalidate authorization tokens when using the PKI or PKIZ token providers, which allows remote authenticated users to bypass intended access restrictions and gain access to cloud resources by manipulating byte fields within a revoked token.

CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Openstack Oracle
Products
Keystone Keystonemiddleware Solaris
CVE-2015-7548

openstack-nova: Unprivileged API user can access host data using instance snapshot

OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.

CVSS 3.0 · 3.5 Low EPSS 1.8% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Openstack
CVE-2015-7713

openstack-nova: network security group changes are not applied to running instances

OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made.

CVSS 2.0 · 5.0 Medium EPSS 3.7% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Openstack
CVE-2015-8466

openstack-swift-plugin3: replay attack - date/date header unvalidated

Swift3 before 1.9 allows remote attackers to conduct replay attacks via an Authorization request that lacks a Date header.

CVSS 3.0 · 7.4 High EPSS 2.0% KEV · Not listed
Vendors
Fedoraproject Openstack
Products
Fedora Swift3
CVE-2015-8749

openstack-nova: Xen connection password leak in logs via StorageError

The volume_utils._parse_volume_info function in OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty) includes the connection_info dictionary in the StorageError message when using the Xen backend, which might allow attackers to obtain sensitive password information by reading log files or other unspecified vectors.

CVSS 3.0 · 5.9 Medium EPSS 2.2% KEV · Not listed
Vendors
Openstack
Products
Nova
CVE-2015-8914

openstack-neutron: ICMPv6 source address spoofing vulnerability

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address.

CVSS 3.0 · 9.1 Critical EPSS 4.3% KEV · Not listed
Vendors
Openstack Redhat
Products
Neutron Openstack
CVE-2016-0737

openstack-swift: Client to proxy DoS through Large Objects

OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.

CVSS 3.0 · 7.5 High EPSS 3.9% KEV · Not listed
Vendors
Openstack Redhat
Products
Swift Openstack Storage
CVE-2016-0738

openstack-swift: Proxy to server DoS through Large Objects

OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.

CVSS 3.0 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Openstack Redhat
Products
Swift Openstack Storage
CVE-2016-0757

openstack-glance: Glance image status manipulation through locations

OpenStack Image Service (Glance) before 2015.1.3 (kilo) and 11.0.x before 11.0.2 (liberty), when show_multiple_locations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image.

CVSS 3.0 · 4.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Openstack Redhat
Products
Image Registry And Delivery Service \(glance\) Openstack
CVE-2016-2140

openstack-nova: Host data leak through resize/migration

The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow_images is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk.

CVSS 3.0 · 5.3 Medium EPSS 2.1% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Openstack
CVE-2016-4428

python-django-horizon: XSS in client side template

Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS template in a dashboard form.

CVSS 3.1 · 5.4 Medium EPSS 2.1% KEV · Not listed
Vendors
Debian Openstack Redhat
Products
Debian Linux Horizon Enterprise Linux and 1 more
CVE-2016-4972

openstack-murano: RCE via usage of insecure YAML tags

OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-muranoclient before 0.7.3 (liberty) and 0.8.x before 0.8.5 (mitaka) improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files, which allows remote attackers to create arbitrary Python objects and execute arbitrary code via crafted extended YAML tags in UI definitions in packages.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Openstack
Products
Mitaka-murano Murano Murano-dashboard and 1 more
CVE-2016-5362

openstack-neutron: DHCP spoofing vulnerability

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a crafted DHCP discovery message.

CVSS 3.0 · 8.2 High EPSS 3.4% KEV · Not listed
Vendors
Openstack Redhat
Products
Neutron Openstack
CVE-2016-5363

openstack-neutron: MAC source address spoofing vulnerability

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via (1) a crafted DHCP discovery message or (2) crafted non-IP traffic.

CVSS 3.0 · 8.2 High EPSS 3.3% KEV · Not listed
Vendors
Openstack Redhat
Products
Neutron Openstack
CVE-2016-7498

openstack-nova: May fail to delete images in resize state regression

OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. NOTE: this vulnerability exists because of a CVE-2015-3280 regression.

CVSS 3.0 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Openstack
Products
Compute \(nova\)