Skip to content
OpenAdvisories
Medium RHSA-2020:4391 1 CVE

Red Hat Security Advisory: openstack-cinder security update

Published Sep 13, 2024 · Updated Oct 8, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenStack 13 openstack:13::el7 openstack-cinder 1:12.0.10-19.el7ost
Red Hat · OpenStack 13 openstack:13::el7 python-cinder 1:12.0.10-19.el7ost

Vulnerabilities 1

  • Medium 6.5
    CVE-2020-10755

    Openstack cinder Improper handling of ScaleIO backend credentials

    An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-cinder 15.x.x versions before openstack-cinder 15.2.0 and all openstack-cinder 16.x.x versions before openstack-cinder 16.1.0. When using ope…

    Red Hat openstack-cinder cinder cinder Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1741730
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1812988
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1841157
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1842748
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1843088
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1843196
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1870569
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4391.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-10755
  • article
    https://access.redhat.com/articles/5144231
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-10755
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-10755
  • article
    https://wiki.openstack.org/wiki/OSSN/OSSN-0086