OpenStack

1 → 25 of 25 results First • Previous • Next • Last
Critical
New
#1990157 OSSN-0090: Malicious image data modification can happen when using COW
Glance 268
High
In Progress
#1655781 Swift object/proxy server writing Auth Token to log file (swauth)
Swift Authentication 262
High
In Progress
#1931132 plain password logged in rhel-registration actions
tripleo 8
Medium
In Progress
#1409302 Use of GreenAsyncPile can lose txn_id logging
OpenStack Object Storage (swift) 10
Medium
Triaged
#1470417 hiera: code execution from the current directory
Fuel for OpenStack 6
Medium
Triaged
#1688137 [OSSA-2021-003] Account name and UUID oracles in account locking (CVE-2021-38155)
OpenStack Identity (keystone) 268
Low
Triaged
#1177924 Use testr instead of nose as the unittest runner.
OpenStack DBaaS (Trove) 20
Low
Triaged
#1417975 race conditions in security-group additions
OpenStack Compute (nova) 26
Low
In Progress
#1529836 Fix deprecated library function (os.popen()).
congress 8
Wishlist
Triaged
#1795800 Timing oracle in core auth plugin simplifies brute-forcing usernames
OpenStack Identity (keystone) 8
Undecided
New
#1341954 suds client subject to cache poisoning by local attacker
gantt 262
Undecided
New
#1447871 Several insecure /tmp usage in guestagent (CVE-2015-3156)
OpenStack DBaaS (Trove) 10
Undecided
In Progress
#1529836 Fix deprecated library function (os.popen()).
OpenStack Object Storage (swift) 8
Undecided
In Progress
#1529836 Fix deprecated library function (os.popen()).
Python client library for Zaqar 8
Undecided
In Progress
#1529836 Fix deprecated library function (os.popen()).
Kwapi 8
Undecided
In Progress
#1529836 Fix deprecated library function (os.popen()).
bilean 8
Undecided
In Progress
#1811098 [SRU] ceilometer writing snmp credentials to log file
Ceilometer 260
Undecided
Incomplete
#1892848 XSS in adding JavaScript into the ‘Subnet Name’ field
OpenStack Security Advisory 268
Undecided
Incomplete
#1892848 XSS in adding JavaScript into the ‘Subnet Name’ field
OpenStack Dashboard (Horizon) 268
Undecided
In Progress
#1981813 Compute service fails to restart if the vnic_type of a bound port changed from direct to macvtap (CVE-2022-37394)
OpenStack Security Advisory 256
Undecided
New
#1988026 Neutron should not create security group with project==None
OpenStack Security Advisory 268
Undecided
Incomplete
#1992183 Openstack: Application credential token remains valid longer than expected (CVE-2022-2447)
OpenStack Security Advisory 258
Undecided
In Progress
#2004555 [OSSA-2023-003] Unauthorized volume access through deleted volume attachments (CVE-2023-2088)
os-brick 294
Undecided
In Progress
#2004555 [OSSA-2023-003] Unauthorized volume access through deleted volume attachments (CVE-2023-2088)
kolla-ansible 294
Undecided
New
#2032682 Heat template network discovery
OpenStack Security Advisory 6
1 → 25 of 25 results First • Previous • Next • Last