openstack-nova-api vulnerabilities (Red Hat)
55 vulnerabilities.
openstack-nova-apiRed HatOpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests6.0 Mediumopenstack-nova-apiRed HatOpenStack Nova DoS through ephemeral disk backing files4.0 Mediumopenstack-nova-apiRed HatOpenStack Nova Live migration can leak root disk into ephemeral storage7.1 Highopenstack-nova-apiRed HatOpenStack Nova denial of service through compressed disk images2.1 Lowopenstack-nova-apiRed HatThe python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce...4.3 Mediumopenstack-nova-apiRed HatOpenStack Nova live snapshots use an insecure local directory3.3 Lowopenstack-nova-apiRed HatOpenStack Nova Router metadata queries are not restricted by tenant5.0 Mediumopenstack-nova-apiRed HatOpenStack Compute Nova Improper Access Control6.4 Mediumopenstack-nova-apiRed HatOpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend...3.5 Lowopenstack-nova-apiRed HatOpenStack Nova Denial of Service in network source security groups4.0 Mediumopenstack-nova-apiRed HatOpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack4.3 Mediumopenstack-nova-apiRed HatOpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information6.0 Mediumopenstack-nova-apiRed HatXML Entity Expansion (XEE) in Django5.0 Mediumopenstack-nova-apiRed HatOpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function4.0 Mediumopenstack-nova-apiRed HatOpenstack nova: vnc proxy can connect to the wrong vm7.6 Highopenstack-nova-apiRed HatXML External Entity (XXE) in Django5.0 Mediumopenstack-nova-apiRed HatThe boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova...6.5 Mediumopenstack-nova-apiRed HatOpenstack nova: information leak in libvirt lvm-backed instances6.5 Medium