Vendor
OpenStack
77 known vulnerabilities.
Products
77 results · Feed
-
High 8.3
In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in pos…
-
Medium 5.4
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfi…
-
Medium 5.0
OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nod…
-
Medium 4.3
OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of unc…
-
Medium 4.3
In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin use…
-
Critical 9.9
In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns t…
-
High 7.2
In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can …
-
Medium 6.0
In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another pr…
-
High 7.1
In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the mainte…
-
High 8.7
In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly t…
-
Medium 6.1
In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bind the project identifier in subsequent requests t…
-
Critical 9.2
In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empt…
-
Medium 5.3
In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests. A Temp…
-
Critical 9.4
In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers fiel…
-
Critical 9.4
In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy redi…
-
High 7.2
In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delet…
-
High 7.1
In OpenStack Blazar before 17.0.1, the V2 lease listing operation (GET /v2/leases) returns leases for every project wit…
-
High 7.0
In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to…
-
Medium 6.3
OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is con…
-
High 7.6
An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods (EC2 …
-
High 7.1
In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-s…
-
High 7.6
In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms (OAuth1 access tokens, app…
-
High 7.6
In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped a…
-
Low 2.2
In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allo…
-
High 8.4
In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is s…
-
Medium 6.3
In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollmen…
-
Medium 4.3
OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another proje…
-
Medium 6.8
In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NO…
-
Critical 9.6
In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB const…
-
Medium 5.0
In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assig…
-
Medium 6.0
In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers (X-Copy-From, X-…
-
Medium 6.0
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-* headers are covered by the S…
-
High 8.7
In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to ca…
-
High 7.1
In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An a…
-
Medium 4.8
OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known.
-
High 7.2
In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code…
-
Medium 5.5
In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, …
-
High 8.2
In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface …
-
Medium 5.5
OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization.
-
Medium 5.3
OpenStack Swift vulnerable to authenticated server-side request forgery
In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers (X-Container-Host, X-Container-Device, X-Delete-At-Host, X-Delete-At-Device) from client requests before forwarding them to object-servers. An authenticated user with write …