CVE-2013-1865

keystone: online validation of Keystone PKI tokens bypasses revocation check

OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.

CVSS 2.0 · 6.8 Medium EPSS 2.6% KEV · Not listed

Vendors

Canonical Openstack Redhat

Products

Ubuntu Linux Folsom Openstack

CVE-2013-2006

keystone: DEBUG level LDAP password disclosure in log files

OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Openstack Redhat

Products

Keystone Openstack

CVE-2013-2104

Keystone: Missing expiration check in Keystone PKI token validation

python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remote authenticated users to (1) retain use of a token after it has expired, or (2) use a revoked token once it expires.

CVSS 2.0 · 5.5 Medium EPSS 2.1% KEV · Not listed

Vendors

Openstack Redhat

Products

Python-keystoneclient Openstack

CVE-2013-2157

openstack-keystone: Authentication bypass when using LDAP backend

OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.

CVSS 2.0 · 4.3 Medium EPSS 3.1% KEV · Not listed

Vendors

Openstack Redhat

Products

Keystone Openstack

CVE-2013-2161

Swift: Unchecked user input in Swift XML responses

XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.

CVSS 2.0 · 7.5 High EPSS 1.9% KEV · Not listed

Vendors

Openstack Opensuse Redhat

Products

Folsom Grizzly Havana and 2 more

CVE-2013-2256

OpenStack: Nova private flavors resource limit circumvention

OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id.

CVSS 2.0 · 6.0 Medium EPSS 1.8% KEV · Not listed

Vendors

Openstack Redhat

Products

Nova Openstack

CVE-2013-4111

OpenStack: python-glanceclient failing SSL certificate check

The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the preverify_ok value, which prevents the server hostname from being verified with a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate and allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

CVSS 2.0 · 5.8 Medium EPSS < 1% KEV · Not listed

Vendors

Openstack Opensuse Redhat

Products

Python Glanceclient Opensuse Openstack

CVE-2013-4155

OpenStack: Swift Denial of Service using superfluous object tombstones

OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service ("superfluous" tombstone consumption and Swift cluster slowdown) via a DELETE request with a timestamp that is older than expected.

CVSS 2.0 · 4.0 Medium EPSS 1.7% KEV · Not listed

Vendors

Openstack Redhat

Products

Folsom Grizzly Havana and 2 more

CVE-2013-4179

OpenStack: Nova XML entities DoS

The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664.

CVSS 2.0 · 4.3 Medium EPSS 2.7% KEV · Not listed

Vendors

Openstack Redhat

Products

Compute Havana Openstack

CVE-2013-4183

OpenStack: Cinder LVM volume driver does not support secure deletion

The clear_volume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspecified vectors.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Openstack Redhat

Products

Cinder Openstack

CVE-2013-4185

OpenStack: Nova network source security groups denial of service

Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service (nova-network consumption) via a large number of server-creation operations, which triggers a large number of update requests.

CVSS 2.0 · 4.0 Medium EPSS 2.1% KEV · Not listed

Vendors

Openstack Redhat

Products

Compute Openstack

CVE-2013-4202

OpenStack: Cinder Denial of Service using XML entities

The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume_transfer.py) APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664.

CVSS 2.0 · 4.3 Medium EPSS 2.6% KEV · Not listed

Vendors

Canonical Openstack Redhat

Products

Ubuntu Linux Cinder Openstack

CVE-2013-4222

OpenStack: Keystone disabling a tenant does not disable a user token

OpenStack Identity (Keystone) Folsom, Grizzly 2013.1.3 and earlier, and Havana before havana-3 does not properly revoke user tokens when a tenant is disabled, which allows remote authenticated users to retain access via the token.

CVSS 2.0 · 6.5 Medium EPSS 1.9% KEV · Not listed

Vendors

Canonical Fedoraproject Openstack and 1 more

Products

Ubuntu Linux Fedora Keystone and 1 more

CVE-2013-4261

OpenStack: openstack-nova-compute console-log DoS

OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.

CVSS 2.0 · 3.5 Low EPSS 1.7% KEV · Not listed

Vendors

Openstack Redhat

Products

Folsom Grizzly Openstack

CVE-2013-4294

OpenStack: Keystone Token revocation failure using Keystone memcache/KVS backends

The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with PKI tokens, which allow remote attackers to bypass intended access restrictions via a revoked PKI token.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed

Vendors

Openstack Redhat

Products

Keystone Openstack

CVE-2013-4428

Glance: image_download policy not enforced for cached images

OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image policy is configured, does not properly restrict access to cached images, which allows remote authenticated users to read otherwise restricted images via an image UUID.

CVSS 2.0 · 3.5 Low EPSS 3.1% KEV · Not listed

Vendors

Canonical Openstack Redhat

Products

Ubuntu Linux Glance Openstack

CVE-2013-4463

Nova: Compressed disk image DoS

OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) via a compressed QCOW2 image. NOTE: this issue is due to an incomplete fix for CVE-2013-2096.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Openstack Redhat

Products

Folsom Grizzly Havana and 1 more

CVE-2013-4477

openstack-keystone: unintentional role granting with Keystone LDAP backend

The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openstack Redhat

Products

Grizzly Havana Openstack

CVE-2013-4497

openstack-nova: XenAPI security groups not kept through migrate or resize

The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migration, which allows remote attackers to bypass intended restrictions.

CVSS 2.0 · 6.4 Medium EPSS 1.8% KEV · Not listed

Vendors

Openstack Redhat

Products

Folsom Grizzly Havana and 1 more

CVE-2013-6391

Keystone: trust circumvention through EC2-style tokens

The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before icehouse-2 does not return a trust-scoped token when one is received, which allows remote trust users to gain privileges by generating EC2 credentials from a trust-scoped token and using them in an ec2tokens API request.

CVSS 2.0 · 5.8 Medium EPSS 2.2% KEV · Not listed

Vendors

Canonical Openstack Redhat

Products

Ubuntu Linux Keystone Openstack