Skip to contentOpenstack vulnerabilities
Newest
- openstack novaOpenStack Nova live snapshots use an insecure local directoryCVE-2013-7048Fix available3.3 Low
- openstack swiftOpenStack Swift Discloses Secret URLs to Timing AttackCVE-2014-0006Fix available4.3 Medium
- openstack python-keystoneclientpython-keystoneclient missing expiration check in PKI token validationCVE-2013-2104Fix available5.5 Medium
- openstack havanaOpenStack Nova Router metadata queries are not restricted by tenantCVE-2013-6419Fix available5.0 Medium
- openstack folsom, grizzly, havana +1 more +3 moreOpenStack Nova uses insecure keystone middleware tmpdir by defaultCVE-2013-2030Fix available2.1 Low
- openstack keystone, redhat openstack, canonical ubuntu linux +2 moreThe ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before...CVE-2013-6391Fix available5.8 Medium
- openstack heatThe ReST API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before...CVE-2013-6428Fix available4.0 Medium
- openstack heatThe cloudformation-compatible API in OpenStack Orchestration API (Heat) before Havana 2013.2.1...CVE-2013-6426Fix available4.0 Medium
- openstack ceilometer(1) impl_db2.py and (2) impl_mongodb.py in OpenStack Ceilometer 2013.2 and earlier, when the...CVE-2013-6384Fix available1.9 Low
- openstack horizon, canonical ubuntu linux, opensuse +2 moreMultiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and...CVE-2013-6858Fix available4.3 Medium
- openstack image registry and delivery service \(glance\)The API before 2.1 in OpenStack Image Registry and Delivery Service (Glance) makes it easier for...CVE-2013-43542.1 Low
- openstack folsom, grizzly, havana +2 moreOpenStack Compute Nova Improper Access ControlCVE-2013-4497Fix available6.4 Medium
- openstack grizzly, havana +1 moreOpenStack Identity Keystone Privilege Escalation vulnerabilityCVE-2013-4477Fix available3.3 Low
- openstack folsom, grizzly, havana +2 moreOpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 imageCVE-2013-4469Fix available1.9 Low
- openstack folsom, grizzly, redhat openstack +2 moreOpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend...CVE-2013-4261Fix available3.5 Low
- openstack compute, redhat openstack +1 moreOpenStack Nova Denial of Service in network source security groupsCVE-2013-4185Fix available4.0 Medium
- openstack glance, canonical ubuntu linux +1 moreOpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and...CVE-2013-4428Fix available3.5 Low
- openstack python-keystoneclientpython-keystoneclient unsecure user password updateCVE-2013-2013Fix available2.1 Low
- openstack keystone, redhat openstack, canonical ubuntu linux +1 more +3 moreOpenStack Identity (Keystone) Folsom, Grizzly 2013.1.3 and earlier, and Havana before havana-3...CVE-2013-4222Fix available6.5 Medium
- openstack keystoneOpenStack Identity (Keystone) allows remote attackers to bypass intended access restrictions via revoked PKI tokenCVE-2013-4294Fix available5.0 Medium
- openstack computeOpenStack Compute (Nova) Resource limit circumvention in Nova private flavorsCVE-2013-4278Fix available3.5 Low
- openstack cinder, canonical ubuntu linux +1 moreOpenStack Cinder Denial of Service using XML entitiesCVE-2013-4202Fix available4.3 Medium
- openstack cinderOpenStack Cinder LVMVolumeDriver does not zero deleted snapshotsCVE-2013-4183Fix available2.1 Low
- openstack compute, havana +1 moreOpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attackCVE-2013-4179Fix available4.3 Medium
- openstack novaOpenStack Compute (Nova) allows remote authenticated users to obtain sensitive informationCVE-2013-2256Fix available6.0 Medium
- openstack python glanceclient, opensuse +1 morepython-glanceclient vulnerable to SSL server spoofing due to unverified X.509 certificateCVE-2013-4111Fix available5.8 Medium
- openstack keystoneOpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous...CVE-2013-2157Fix available4.3 Medium
- openstack folsom, grizzly, havana +1 more +3 moreOpenStack Swift allows authenticated users to cause a denial of serviceCVE-2013-4155Fix available4.0 Medium
- openstack folsom, grizzly, havana +1 more +3 moreOpenStack Swift Unchecked user input in XML responsesCVE-2013-2161Fix available7.5 High
- openstack folsom, grizzly, havana +2 moreOpenStack Compute (Nova) does not verify the virtual size of a QCOW2 imageCVE-2013-2096Fix available2.1 Low
- openstack keystoneOpenStack Identity (Keystone) improper revoking of the authentication token when deleting a userCVE-2013-2059Fix available6.0 Medium
- openstack keystoneOpenStack Keystone Sensitive information disclosure via log filesCVE-2013-2006Public exploitFix available2.1 Low
- openstack devstackOpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to...CVE-2013-19772.1 Low
- openstack keystoneOpenStack Keystone allows context-dependent attackers to bypass access restrictionsCVE-2013-0282Fix available5.0 Medium
- openstack keystone, red hat openstack folsom for rhel 6, openstack platform 13 (queens) +3 more +5 moreKeystone: openstack keystone: denial of service via large http request with long tenant nameCVE-2013-0270Fix available6.5 Medium
- openstack cinder folsom, folsom, grizzly +3 more +5 moreXML Entity Expansion (XEE) in DjangoCVE-2013-1664Fix available5.0 Medium
- openstack folsom, canonical ubuntu linux +1 moreOpenStack Keystone Improper Authentication vulnerabilityCVE-2013-1865Fix available6.8 Medium
- openstack glance, red hat openstack folsom for rhel 6, openstack platform 16.2 +2 more +4 moreOpenstack glance: swift: s3: openstack glance: information disclosure of backend credentials via cached image requestCVE-2013-1840Fix available6.5 Medium
- openstack essex, folsom, grizzly +1 more +3 moreOpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp functionCVE-2013-1838Fix available4.0 Medium
- openstack essex, folsom, grizzly +6 more +8 moreOpenstack nova: vnc proxy can connect to the wrong vmCVE-2013-0335Fix available7.6 High
- openstack essex, folsom, red hat openstack folsom for rhel 6 +2 more +4 morePuppetlabs-cinder: packstack: openstack: puppetlabs-cinder: information disclosure of openstack administrative passwords due to world-readable configuration files.CVE-2013-02665.5 Medium
- openstack essex, folsom, red hat openstack folsom for rhel 6 +2 more +4 morePackstack: packstack: arbitrary file overwrite via symlink attackCVE-2013-02618.8 High
- openstack folsom, keystone essex +1 moreXML External Entity (XXE) in DjangoCVE-2013-1665Fix available5.0 Medium
- canonical ubuntu linux, openstack image registry and delivery service \(glance\) +1 moreOpenStack Glance logs user name and password in cleartextCVE-2013-0212Public exploitFix available4.0 Medium
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2...CVE-2013-0247Fix available5.0 Medium
- openstack essex, folsom, canonical ubuntu linux +2 moreThe boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova...CVE-2013-0208Fix available6.5 Medium
- openstack folsom, grizzly, red hat openstack folsom for rhel 6 +3 more +5 moreOpenstack nova: information leak in libvirt lvm-backed instancesCVE-2012-5625Fix available6.5 Medium
- openstack keystonetools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud ...CVE-2012-54832.1 Low
- openstack essex, folsom, red hat openstack essex for rhel 6 +5 more +7 moreOpenstack keystone: openstack keystone: authorization bypass via improper ec2 token handlingCVE-2012-5571Fix available5.4 Medium
- openstack folsomOpenStack Keystone Insufficient token expirationCVE-2012-5563Fix available4.0 Medium
- Show moreLoading…