redhat openstack platform 16.2 vulnerabilities and exploits

(subscribe to this query)

NA

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were...

Redhat Openstack Platform 16.1 Redhat Openstack Platform 13.0 Redhat Openstack Platform 16.2 Openstack Neutron

NA

An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an attacker on the network to modify or delete p...

Openstack Barbican Redhat Openstack Platform 16.1 Redhat Openstack Platform 13.0 Redhat Openstack Platform 16.2

NA

A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any ...

Openstack Barbican -Redhat Openstack Platform 16.1 Redhat Openstack Platform 16.2 Redhat Openstack Platform 17.0

NA

A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated malicious user to read the configuration file, gaining access to sensitive credentials.

Openstack Barbican -Redhat Openstack Platform 16.1 Redhat Openstack Platform 16.2 Redhat Openstack Platform 17.0

NA

An information leak exists in OpenStack heat. This issue could allow a remote, authenticated malicious user to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availabilit...

Openstack Heat -Redhat Openstack Platform 16.1 Redhat Openstack Platform 13.0 Redhat Openstack Platform 16.2 Redhat Openstack Platform 17.0

NA

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were...

Redhat Openstack Platform 13.0 Redhat Openstack Platform 16.2

4

CVSSv2

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

Openstack Nova Redhat Openstack Platform 16.1 Redhat Openstack Platform 16.2

5.5

CVSSv2

A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial o...

Openstack Neutron 18.0.0 Openstack Neutron Redhat Openstack Platform 16.1 Redhat Openstack Platform 13.0 Redhat Openstack Platform 10.0 Redhat Openstack Platform 16.2

NA

A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from when it is actually revoked. This could allow a remote administrator to secretly maintain access for longer than expected...

Openstack Keystone -Redhat Storage 3.0 Redhat Quay 3.0.0 Redhat Openstack Platform 16.1 Redhat Openstack Platform 16.2

NA

A flaw was found in OpenStack. Multiple components show plain-text passwords in /var/log/messages during the OpenStack overcloud update run, leading to a disclosure of sensitive information problem.

Redhat Openstack Platform 16.2

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook