Skip to content
OpenAdvisories
Medium WID-SEC-2026-2365 2 CVEs

Red Hat OpenShift (OpenStack Services): Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published Jul 14, 2026 · Updated Aug 13, 2026 · Revision 2 · de-DE

Vendor: Red Hat Product: Enterprise Linux Product: openshift Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Red Hat OpenShift (OpenStack Services) ausnutzen, um Informationen offenzulegen.

Product

Red Hat OpenShift ist eine "Platform as a Service" (PaaS) Lösung zur Bereitstellung von Applikationen in der Cloud.

Vulnerabilities 2

  • High 7.7
    CVE-2026-42997

    OpenStack Ironic has an Incorrect Resource Transfer Between Spheres

    An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token (which provides access to all OpenSta…

    OpenStack Ironic ironic ironic Debian Ubuntu PyPI
  • Medium 5.0
    CVE-2026-34881

    OpenStack Glance is affected by Server-Side Request Forgery (SSRF)

    OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import func…

    OpenStack Glance glance glance Debian Ubuntu PyPI

Revision history

  1. #2

    Neue Updates von Red Hat aufgenommen

  2. #1

    Initiale Fassung

References