Skip to content
OpenAdvisories

Archive

12 April 2013

Vulnerabilities first published on this day (UTC), newest first.

← March 2013 2013 / April /12 May 2013 →
  1. 14
  2. 26
  3. 319
  4. 414
  5. 58
  6. 6 
  7. 72
  8. 87
  9. 931
  10. 1015
  11. 1116
  12. 1210
  13. 132
  14. 14 
  15. 15 
  16. 1614
  17. 17152
  18. 1814
  19. 197
  20. 20 
  21. 213
  22. 2222
  23. 235
  24. 2416
  25. 2528
  26. 2610
  27. 274
  28. 283
  29. 2915
  30. 303
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    CVE-2013-0282

    OpenStack Keystone allows context-dependent attackers to bypass access restrictions

    OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restr…

    keystone keystone Debian PyPI
  • Medium 6.5
    CVE-2013-0270

    Keystone: openstack keystone: denial of service via large http request with long tenant name

    A flaw was found in OpenStack Keystone. A remote attacker could exploit this vulnerability by sending a large HTTP request, specifically by providing a long tenant name when requesting a token. This could lead to a denial of service, consuming excessive CPU a…

    Red Hat Red Hat OpenStack Platform 13 (Queens) Red Hat OpenStack Platform 18.0 Red Hat OpenStack Platform 16.2 Debian PyPI