Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um Informationen offenzulegen.
Product
Red Hat OpenStack ist eine Sammlung von Diensten, um Cloud-Computing in Form von Infrastructure as a Service (IaaS) bereitstellen zu können.
Vulnerabilities 3
-
High 7.4
Information leak in api
An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, an…
-
Medium 6.6
Insecure barbican configuration file leaking credential
A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials.
-
Medium 6.0
Incomplete container isolation
A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenSt…
Revision history
-
#2
Neue Updates von Red Hat aufgenommen
-
#1
Initiale Fassung
References
-
Red Hat Security Advisory RHSA-2023:6231 vom 2023-11-09
https://access.redhat.com/errata/RHSA-2023:6231
-
OpenStack Security Advisories vom 2023-09-24
https://github.com/advisories/GHSA-6rx9-c2rh-3qv4
-
OpenStack Security Advisories vom 2023-09-24
https://github.com/advisories/GHSA-6qqp-4vm3-359v
-
OpenStack Security Advisories vom 2023-09-24
https://github.com/advisories/GHSA-5836-grcc-8j89