OpenStack

1 → 75 of 78 results First • Previous • • Last
Critical
Confirmed
#1546507 Regular user in non-default non-recommended configuration can delete any image file
Glance 42
Critical
New
#1933269 Project admin gets treated as Global Admin with Secure RBAC
Glance 10
Critical
New
#1990157 OSSN-0090: Malicious image data modification can happen when using COW
Glance 268
High
Confirmed
#1100220 Swift+Glance stops working after changing service password
glance_store 34
High
Triaged
#1408530 heat CLI is passing raw username and password for stack-create stack-update and stack-preview
python-heatclient 6
High
Confirmed
#1549483 Normal user can replace active image data if show_multiple_locations has been set to true
Glance 14
High
Confirmed
#1563954 use_forwarded_for exposes metadata
OpenStack Compute (nova) 10
High
Confirmed
#1572719 Client may hold socket open after ChunkWriteTimeout
OpenStack Object Storage (swift) 26
High
In Progress
#1742102 Simple user can disable compute
OpenStack Compute (nova) 28
High
Confirmed
#1798904 tenant isolation is bypassed if port admin-state-up=false
OpenStack Compute (nova) 18
High
Triaged
#1819957 Caching with stale data when a server disconnects due to network partition and reconnects
keystonemiddleware 14
High
Triaged
#1915282 nova allows non string values in pci whitelist for physical_network tag.
OpenStack Compute (nova) 18
High
In Progress
#2003179 [Dell PowerFlex] [scaleio]: password appears in plain text when creating a volume from an image
Cinder 8
Medium
Triaged
#1343657 Shell Injection in backup strategies
OpenStack DBaaS (Trove) 20
Medium
New
#1417762 XSS in network create error reporting
OpenStack Dashboard (Horizon) 12
Medium
Triaged
#1434545 Several command injection vulnerabilities in guestagent/pkg
OpenStack DBaaS (Trove) 10
Medium
Confirmed
#1447679 service No-VNC (port 6080) doesn't require authentication
OpenStack Compute (nova) 40
Medium
Confirmed
#1516703 crypto.py generates certs with SHA-1 digest
OpenStack Compute (nova) 6
Medium
Triaged
#1534284 keystoneauth auth plugins should not use etree XML parsing
keystoneauth 6
Medium
Confirmed
#1605914 Hard coded security group
OpenStack DBaaS (Trove) 8
Medium
Triaged
#1791973 User cannot list their own trusts
OpenStack Identity (keystone) 8
Medium
In Progress
#1824442 Manila's share networks API exposes privileged network information
OpenStack Shared File Systems Service (Manila) 12
Medium
Confirmed
#1842930 Deleted user still can delete volumes in Horizon
OpenStack Dashboard (Horizon) 8
Medium
Triaged
#1842930 Deleted user still can delete volumes in Horizon
keystonemiddleware 8
Medium
Confirmed
#1861893 os-assisted-volume-snapshots passes unsanitised file path to the libvirt driver
OpenStack Compute (nova) 14
Medium
Triaged
#1875630 issue OSSN when glance no longer requires an md5 implementation
Glance 6
Medium
Triaged
#1989008 Lax rulesets leading to privilege escalation vulnerabilities
OpenStack Compute (nova) 16
Low
Confirmed
#1305566 the token still can be used if the EC2 credential has been deleted
OpenStack Identity (keystone) 8
Low
In Progress
#1649634 Insecure Randomness for AES Passphrase Generation
Cinder 10
Low
New
#1651679 horizon auth switch redir DoS
OpenStack Dashboard (Horizon) 8
Low
Confirmed
#1837339 CIDR's of the form 12.34.56.78/0 should be an error
OpenStack Dashboard (Horizon) 12
Low
Fix Committed
#1849624 ceph backend, secret key leak
Cinder 8
Low
Confirmed
#1850274 Updating any neutron quota for non-existent project works
neutron 8
Wishlist
Confirmed
#1552182 LMA toolchain should alert when packages upgrade is available
StackLight 6
Wishlist
New
#1657139 XML Injection
OpenStack DBaaS (Trove) 8
Wishlist
Confirmed
#1674191 HTTPS connection and authentication are not supported between swift-proxy and swift-account-server/swift-container-server/swift-object-server.
OpenStack Object Storage (swift) 8
Wishlist
Triaged
#1795800 Timing oracle in core auth plugin simplifies brute-forcing usernames
OpenStack Identity (keystone) 8
Wishlist
Confirmed
#1899229 Nova compute log can get the password info from the user_data
OpenStack Compute (nova) 14
Undecided
New
#1341954 suds client subject to cache poisoning by local attacker
gantt 262
Undecided
Confirmed
#1545702 [OSSN-0088] Images v2 api metadef vulnerability
Glance 8
Undecided
New
#1554288 [FG-VD-16-015] Openstack Glance Authenticated User DoS Vulnerability Notification
Glance 8
Undecided
New
#1613901 String "..%c0%af" causes 500 errors in multiple locations
Glance 20
Undecided
Incomplete
#1613901 String "..%c0%af" causes 500 errors in multiple locations
Cinder 20
Undecided
New
#1661333 Cinder Brocade driver does not do certificate validation
Cinder 12
Undecided
Confirmed
#1662558 Nexenta disabling certificate verification
Cinder 6
Undecided
In Progress
#1664723 replication_slave user and passwords exposed in logging
OpenStack DBaaS (Trove) 8
Undecided
New
#1651679 horizon auth switch redir DoS
django-openstack-auth 8
Undecided
In Progress
#1673085 scheduler hints are unbounded and never deleted
OpenStack Compute (nova) 8
Undecided
New
#1687018 One can request to put a volume next to any tenant's instance via InstanceLocalityFilter
Cinder 10
Undecided
Incomplete
#1700501 Insecure rootwrap usage
OpenStack Compute (nova) 26
Undecided
New
#1700501 Insecure rootwrap usage
Cinder 26
Undecided
New
#1705311 security groups add button not working
neutron-trunk-ui 6
Undecided
In Progress
#1724598 DOS : API_RESULT_LIMIT does not work for swift objects
OpenStack Dashboard (Horizon) 28
Undecided
Confirmed
#1784259 Neutron RBAC not working for multiple extensions
neutron 10
Undecided
New
#1785529 Hard-coded passwords found in Puppet scripts
Fuel for OpenStack 6
Undecided
New
#1798904 tenant isolation is bypassed if port admin-state-up=false
neutron 18
Undecided
Incomplete
#1818239 scheduler: build failure high negative weighting
OpenStack Compute (nova) 22
Undecided
In Progress
#1838473 non-IP ethertypes are permitted with iptables_hybrid firewall driver
neutron 10
Undecided
New
#1844712 RA Leak on tenant network
neutron 20
Undecided
New
#1862050 Race condition while allocating floating IPs
neutron 12
Undecided
In Progress
#1876709 Found a new bug
openstack-dev-sandbox 6
Undecided
New
#1884457 Remote Code Execution in trove-conductor
OpenStack DBaaS (Trove) 8
Undecided
New
#1915282 nova allows non string values in pci whitelist for physical_network tag.
neutron 18
Undecided
New
#1916922 [OSSN-0088] Glance leaks resource types across namespaces
Glance 10
Undecided
New
#1916926 [OSSN-0088] Glance leaks namespace existence to unauthorized users
Glance 10
Undecided
New
#1970932 Domain Admins possibility for privilege escalation
OpenStack Identity (keystone) 14
Undecided
New
#1975830 Horizon doesn't provide ACL on Instance level
OpenStack Dashboard (Horizon) 6
Undecided
In Progress
#1977516 When using v3oidcpassword auth and --debug, user password is logged in clear text
keystoneauth 8
Undecided
New
#1988310 Object expiration in Swift header 'X-Remove-Delete-At'
OpenStack Object Storage (swift) 8
Undecided
New
#1989008 Lax rulesets leading to privilege escalation vulnerabilities
os-brick 16
Undecided
New
#2008705 image_utils: xen server image handling issue
Cinder 10
Undecided
New
#2020060 Stateless Feature of Security Group Not Functioning in Case of other Port same compute use statefull
neutron 8
Undecided
New
#2030295 OVN: no DNS responses are generated for TCP queries
neutron 10
Undecided
New
#2033612 Seagate STX driver: Weak Cryptographic Algorithm (MD5) used
Cinder 10
Undecided
In Progress
#2040966 hitachi and OEM : output REST API token
Cinder 6
1 → 75 of 78 results First • Previous • • Last