Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 340

Export CSV
CVE-2016-9185

openstack-heat: Template source URL allows network port scan

In OpenStack Heat, by launching a new Heat stack with a local URL an authenticated user may conduct network discovery revealing internal network configuration. Affected versions are <=5.0.3, >=6.0.0 <=6.1.0, and ==7.0.0.

CVSS 3.0 · 4.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Openstack Redhat
Products
Heat Openstack
CVE-2013-1865

keystone: online validation of Keystone PKI tokens bypasses revocation check

OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.

CVSS 2.0 · 6.8 Medium EPSS 2.6% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Folsom Openstack
CVE-2014-1948

openstack-glance: Glance Swift store backend password leak

OpenStack Image Registry and Delivery Service (Glance) 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading the log.

CVSS 2.0 · 2.6 Low EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Image Registry And Delivery Service \(glance\) Openstack
CVE-2014-0006

Swift: TempURL timing attack

The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack.

CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Openstack Redhat
Products
Swift Openstack
CVE-2013-7130

nova: Live migration can leak root disk into ephemeral storage

The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.

CVSS 2.0 · 7.1 High EPSS 2.4% KEV · Not listed
Vendors
Openstack Redhat
Products
Compute Grizzly Havana and 2 more
CVE-2013-7048

Nova: insecure directory permissions in snapshots

OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Openstack
CVE-2013-6858

openstack: horizon multiple XSS vulnerabilities.

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topology" page.

CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Canonical Openstack Opensuse and 1 more
Products
Ubuntu Linux Horizon Opensuse and 1 more
CVE-2013-6491

nova: qpid SSL configuration

The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce SSL connections when qpid_protocol is set to ssl, which allows remote attackers to obtain sensitive information by sniffing the network.

CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Openstack Redhat
Products
Oslo Openstack
CVE-2013-6428

Heat: ReST API doesn't respect tenant scoping

The ReST API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote authenticated users to bypass the tenant scoping restrictions via a modified tenant_id in the request path.

CVSS 2.0 · 4.0 Medium EPSS 1.7% KEV · Not listed
Vendors
Openstack Redhat
Products
Heat Openstack
CVE-2013-6426

Heat: CFN policy rules not all enforced

The cloudformation-compatible API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy rules, which allows local in-instance users to bypass intended access restrictions and (1) create a stack via the CreateStack method or (2) update a stack via the UpdateStack method.

CVSS 2.0 · 4.0 Medium EPSS 1.0% KEV · Not listed
Vendors
Openstack Redhat
Products
Heat Openstack
CVE-2013-6419

Nova: Metadata queries from Neutron to Nova are not restricted by tenant

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by (1) api/metadata/handler.py in Nova and (2) the neutron-metadata-agent (agent/metadata/agent.py) in Neutron.

CVSS 2.0 · 5.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Openstack Redhat
Products
Havana Openstack
CVE-2013-6396

python-swiftclient: SSL certificate verification security issue

The OpenStack Python client library for Swift (python-swiftclient) 1.0 through 1.9.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVSS 2.0 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Openstack
Products
Swift
CVE-2013-6391

Keystone: trust circumvention through EC2-style tokens

The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before icehouse-2 does not return a trust-scoped token when one is received, which allows remote trust users to gain privileges by generating EC2 credentials from a trust-scoped token and using them in an ec2tokens API request.

CVSS 2.0 · 5.8 Medium EPSS 2.2% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Keystone Openstack
CVE-2013-6384

OpenStack: Ceilometer DB2/MongoDB backend password leak

(1) impl_db2.py and (2) impl_mongodb.py in OpenStack Ceilometer 2013.2 and earlier, when the logging level is set to INFO, logs the connection string from ceilometer.conf, which allows local users to obtain sensitive information (the DB2 or MongoDB password) by reading the log file.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Openstack
Products
Ceilometer
CVE-2013-4497

openstack-nova: XenAPI security groups not kept through migrate or resize

The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migration, which allows remote attackers to bypass intended restrictions.

CVSS 2.0 · 6.4 Medium EPSS 1.8% KEV · Not listed
Vendors
Openstack Redhat
Products
Folsom Grizzly Havana and 1 more
CVE-2013-4477

openstack-keystone: unintentional role granting with Keystone LDAP backend

The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Grizzly Havana Openstack
CVE-2013-4469

Nova: Incomplete fix for CVE-2013-2096

OpenStack Compute (Nova) Folsom, Grizzly, and Havana, when use_cow_images is set to False, does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by transferring an image with a large virtual size that does not contain a large amount of data from Glance. NOTE: this issue is due to an incomplete fix for CVE-2013-2096.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Openstack
Products
Folsom Grizzly Havana
CVE-2013-4463

Nova: Compressed disk image DoS

OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) via a compressed QCOW2 image. NOTE: this issue is due to an incomplete fix for CVE-2013-2096.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Folsom Grizzly Havana and 1 more
CVE-2013-4428

Glance: image_download policy not enforced for cached images

OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image policy is configured, does not properly restrict access to cached images, which allows remote authenticated users to read otherwise restricted images via an image UUID.

CVSS 2.0 · 3.5 Low EPSS 3.1% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Glance Openstack
CVE-2013-4354

OpenStack: Glance image creation in other tenant accounts

The API before 2.1 in OpenStack Image Registry and Delivery Service (Glance) makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a member of the image.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Openstack
Products
Image Registry And Delivery Service \(glance\)