Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 193

Export CSV
CVE-2014-0162

openstack-glance: remote code execution in Glance Sheepdog backend

The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.

CVSS 2.0 · 6.0 Medium EPSS 2.0% KEV · Not listed
Vendors
Openstack Redhat
Products
Icehouse Image Registry And Delivery Service \(glance\) Openstack
CVE-2014-0167

openstack-nova: RBAC policy not properly enforced in Nova EC2 API

The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies for (1) add_rules, (2) remove_rules, (3) destroy, and other unspecified methods in compute/api.py when using non-default policies, which allows remote authenticated users to gain privileges via these API requests.

CVSS 2.0 · 6.0 Medium EPSS 1.7% KEV · Not listed
Vendors
Openstack Redhat
Products
Compute Icehouse Openstack
CVE-2014-7231

Trove: potential leak of passwords into log files

The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Cinder Nova Trove and 1 more
CVE-2014-7230

Trove: potential leak of passwords into log files

The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that cause a ProcessExecutionError by reading the log.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Cinder Nova and 2 more
CVE-2014-7821

openstack-neutron: DoS via maliciously crafted dns_nameservers

OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.

CVSS 2.0 · 4.0 Medium EPSS 3.9% KEV · Not listed
Vendors
Fedoraproject Openstack Redhat
Products
Fedora Neutron Openstack
CVE-2014-6414

openstack-neutron: Admin-only network attributes may be reset to defaults by non-privileged users

OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to set admin network attributes to default values via unspecified vectors.

CVSS 2.0 · 4.0 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Neutron Openstack
CVE-2014-3497

openstack-swift: XSS in Swift requests through WWW-Authenticate header

Cross-site scripting (XSS) vulnerability in OpenStack Swift 1.11.0 through 1.13.1 allows remote attackers to inject arbitrary web script or HTML via the WWW-Authenticate header.

CVSS 2.0 · 4.3 Medium EPSS 2.1% KEV · Not listed
Vendors
Openstack Redhat
Products
Swift Openstack
CVE-2014-7144

python-keystoneclient: TLS certificate verification disabled

OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.

CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Openstack Redhat
Products
Keystonemiddleware Python-keystoneclient Openstack
CVE-2014-7960

openstack-swift: Swift metadata constraints are not correctly enforced

OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.

CVSS 2.0 · 4.0 Medium EPSS 3.1% KEV · Not listed
Vendors
Openstack Redhat
Products
Swift Openstack Storage
CVE-2014-3476

openstack-keystone: privilege escalation through trust chained delegation

OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles.

CVSS 2.0 · 6.0 Medium EPSS 2.3% KEV · Not listed
Vendors
Openstack Redhat Suse
Products
Keystone Openstack Cloud
CVE-2014-3475

openstack-horizon: multiple XSS flaws

Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-8578.

CVSS 2.0 · 3.5 Low EPSS 1.2% KEV · Not listed
Vendors
Openstack Opensuse Redhat
Products
Horizon Opensuse Openstack
CVE-2014-3517

openstack-nova: timing attack issue allows access to other instances' configuration information

api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests.

CVSS 2.0 · 4.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Openstack
CVE-2014-3520

openstack-keystone: Keystone V2 trusts privilege escalation through user supplied project id

OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated trustees to gain access to an unauthorized project for which the trustor has certain roles via the project ID in a V2 API trust token request.

CVSS 2.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Openstack Redhat
Products
Keystone Openstack
CVE-2014-3555

openstack-neutron: Denial of Service in Neutron allowed address pair

OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (crash or long firewall rule updates) by creating a large number of allowed address pairs.

CVSS 2.0 · 4.0 Medium EPSS 2.2% KEV · Not listed
Vendors
Openstack Redhat
Products
Neutron Openstack
CVE-2014-3594

openstack-horizon: persistent XSS in Horizon Host Aggregates interface

Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name.

CVSS 2.0 · 3.5 Low EPSS 2.1% KEV · Not listed
Vendors
Openstack Opensuse Redhat
Products
Horizon Opensuse Openstack
CVE-2014-3608

openstack-nova: incomplete fix for CVE-2014-2573, Nova VMware driver still leaks rescued images

The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573.

CVSS 2.0 · 2.7 Low EPSS 1.7% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Openstack
CVE-2014-3621

openstack-keystone: configuration data information leak through Keystone catalog

The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options via a crafted endpoint, as demonstrated by "$(admin_token)" in the publicurl endpoint field.

CVSS 2.0 · 4.0 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Keystone Enterprise Linux and 1 more
CVE-2014-3632

openstack-neutron: regression of fix for CVE-2013-6433

The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file. NOTE: this vulnerability exists because of a CVE-2013-6433 regression.

CVSS 2.0 · 7.6 High EPSS 2.5% KEV · Not listed
Vendors
Openstack Redhat
Products
Neutron Openstack
CVE-2014-5252

openstack-keystone: token expiration date stored incorrectly

The V3 API in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 updates the issued_at value for UUID v2 tokens, which allows remote authenticated users to bypass the token expiration and retain access via a verification (1) GET or (2) HEAD request to v3/auth/tokens/.

CVSS 2.0 · 4.9 Medium EPSS 1.5% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Keystone Openstack
CVE-2014-3474

openstack-horizon: multiple XSS flaws

Cross-site scripting (XSS) vulnerability in horizon/static/horizon/js/horizon.instances.js in the Launch Instance menu in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to inject arbitrary web script or HTML via a network name.

CVSS 2.0 · 3.5 Low EPSS 1.9% KEV · Not listed
Vendors
Openstack Opensuse Redhat
Products
Horizon Opensuse Openstack