Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 193

Export CSV
CVE-2013-6419

Nova: Metadata queries from Neutron to Nova are not restricted by tenant

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by (1) api/metadata/handler.py in Nova and (2) the neutron-metadata-agent (agent/metadata/agent.py) in Neutron.

CVSS 2.0 · 5.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Openstack Redhat
Products
Havana Openstack
CVE-2013-6426

Heat: CFN policy rules not all enforced

The cloudformation-compatible API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy rules, which allows local in-instance users to bypass intended access restrictions and (1) create a stack via the CreateStack method or (2) update a stack via the UpdateStack method.

CVSS 2.0 · 4.0 Medium EPSS 1.0% KEV · Not listed
Vendors
Openstack Redhat
Products
Heat Openstack
CVE-2013-6428

Heat: ReST API doesn't respect tenant scoping

The ReST API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote authenticated users to bypass the tenant scoping restrictions via a modified tenant_id in the request path.

CVSS 2.0 · 4.0 Medium EPSS 1.7% KEV · Not listed
Vendors
Openstack Redhat
Products
Heat Openstack
CVE-2012-4573

OpenStack: Glance Authentication bypass for image deletion

The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulnerability than CVE-2012-5482.

CVSS 2.0 · 5.5 Medium EPSS 3.4% KEV · Not listed
Vendors
Openstack Redhat
Products
Essex Folsom Image Registry And Delivery Service \(glance\) and 1 more
CVE-2013-6491

nova: qpid SSL configuration

The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce SSL connections when qpid_protocol is set to ssl, which allows remote attackers to obtain sensitive information by sniffing the network.

CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Openstack Redhat
Products
Oslo Openstack
CVE-2013-6858

openstack: horizon multiple XSS vulnerabilities.

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topology" page.

CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Canonical Openstack Opensuse and 1 more
Products
Ubuntu Linux Horizon Opensuse and 1 more
CVE-2013-7048

Nova: insecure directory permissions in snapshots

OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Nova Openstack
CVE-2013-7130

nova: Live migration can leak root disk into ephemeral storage

The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.

CVSS 2.0 · 7.1 High EPSS 2.4% KEV · Not listed
Vendors
Openstack Redhat
Products
Compute Grizzly Havana and 2 more
CVE-2014-0006

Swift: TempURL timing attack

The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack.

CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Openstack Redhat
Products
Swift Openstack
CVE-2012-3540

OpenStack-Horizon: Open redirect through 'next' parameter

Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to auth/login/. NOTE: this issue was originally assigned CVE-2012-3542 by mistake.

CVSS 2.0 · 5.8 Medium EPSS 2.9% KEV · Not listed
Vendors
Openstack Redhat
Products
Horizon Openstack
CVE-2012-4457

2012.1.1: fails to raise Unauthorized user error for disabled tenant

OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-3 does not properly handle authorization tokens for disabled tenants, which allows remote authenticated users to access the tenant's resources by requesting a token for the tenant.

CVSS 2.0 · 4.0 Medium EPSS 2.3% KEV · Not listed
Vendors
Openstack Redhat
Products
Keystone Openstack
CVE-2014-1948

openstack-glance: Glance Swift store backend password leak

OpenStack Image Registry and Delivery Service (Glance) 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading the log.

CVSS 2.0 · 2.6 Low EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Image Registry And Delivery Service \(glance\) Openstack
CVE-2012-4456

2012.1.1: fails to validate tokens in Admin API

The (1) OS-KSADM/services and (2) tenant APIs in OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-2 do not properly validate X-Auth-Token, which allow remote attackers to read the roles for an arbitrary user or get, create, or delete arbitrary services.

CVSS 2.0 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Openstack Redhat
Products
Keystone Openstack
CVE-2012-4413

OpenStack-Keystone: role revocation token issues

OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles.

CVSS 2.0 · 4.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Openstack Redhat
Products
Keystone Openstack
CVE-2012-4406

Openstack-Swift: insecure use of python pickle()

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

CVSS 3.1 · 9.8 Critical EPSS 6.6% KEV · Not listed
Vendors
Fedoraproject Openstack Redhat
Products
Fedora Swift Enterprise Linux Server and 5 more
CVE-2013-0247

Keystone: denial of service through invalid token requests

OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of log entries.

CVSS 2.0 · 5.0 Medium EPSS 3.2% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Keystone Openstack
CVE-2013-0212

openstack-glance: Backend password leak in Glance error message

store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote authenticated users to obtain sensitive information by reading the error messages.

CVSS 2.0 · 4.0 Medium EPSS 3.0% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Image Registry And Delivery Service \(glance\) Openstack
CVE-2013-0208

openstack-nova: Boot from volume allows access to random volumes

The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volume id in the block_device_mapping parameter.

CVSS 2.0 · 6.5 Medium EPSS 2.5% KEV · Not listed
Vendors
Canonical Openstack Redhat
Products
Ubuntu Linux Essex Folsom and 1 more
CVE-2012-5563

OpenStack: Keystone extension of token validity through token chaining

OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating new tokens through token chaining. NOTE: this issue exists because of a CVE-2012-3426 regression.

CVSS 2.0 · 4.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Openstack Redhat
Products
Folsom Openstack
CVE-2012-5483

OpenStack: Keystone /etc/keystone/ec2rc secret key exposure

tools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud (Amazon EC2) is configured, uses world-readable permissions for /etc/keystone/ec2rc, which allows local users to obtain access to EC2 services by reading administrative access and secret values from this file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Keystone Openstack