Skip to content
OpenAdvisories
Medium RHSA-2020:4283 1 CVE

Red Hat Security Advisory: openstack-cinder security update

Published Sep 13, 2024 · Updated Oct 8, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenStack 16 openstack:16.1::el8 openstack-cinder 1:15.3.1-1.20200914173114.00ac80b.el8ost
Red Hat · OpenStack 16 openstack:16.1::el8 python3-cinder 1:15.3.1-1.20200914173114.00ac80b.el8ost

Vulnerabilities 1

  • Medium 6.5
    CVE-2020-10755

    Openstack cinder Improper handling of ScaleIO backend credentials

    An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-cinder 15.x.x versions before openstack-cinder 15.2.0 and all openstack-cinder 16.x.x versions before openstack-cinder 16.1.0. When using ope…

    Red Hat openstack-cinder cinder cinder Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.1/html/release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1702234
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1721361
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1808583
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1826741
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1842748
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1848420
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1862213
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4283.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-10755
  • article
    https://access.redhat.com/articles/5144231
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-10755
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-10755
  • article
    https://wiki.openstack.org/wiki/OSSN/OSSN-0086