OpenStack vulnerabilities

Products

• Keystone 49
• Nova 40
• Neutron 29
• folsom 25
• horizon 24
• Ironic 19
• Swift 19
• essex 15
• image registry and delivery service glance 15
• Glance 14
• grizzly 14
• compute 12
• havana 11
• cinder 10
• heat 7
• python-keystoneclient 7
• barbican 5
• keystonemiddleware 5
• Mistral 5
• Octavia 5
• tripleo heat templates 5
• Designate 4
• icehouse 4
• Ironic Python Agent 3
• Manila 3
• openstack 3
• trove 3
• Zaqar 3
• Blazar 2
• ceilometer 2

Latest OpenStack CVEs

Newest publication first · page 14 of 14

1. CVE-2012-3426 OpenStack Keystone token expiration issues

   Published 2012-07-31

   Medium·CVSS 4.9 EPSS 2.3%

   OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by (1) creating new tokens through token chaini...

2. CVE-2012-3360 OpenStack Nova Directory traversal vulnerability

   Published 2012-07-22

   Medium·CVSS 5.5 EPSS 3.1%

   Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors, allows remote authenticated users to write arbitrary files to the disk image via a .. (dot dot) in the path attribute of...

3. CVE-2012-3361 OpenStack Nova Arbitrary file injection/corruption through directory traversal issues

   Published 2012-07-22

   Medium·CVSS 5.5 EPSS 2.7%

   virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image.

4. CVE-2012-3371 OpenStack Nova Scheduler denial of service through scheduler_hints

   Published 2012-07-17

   Low·CVSS 3.5 EPSS 1.9%

   The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of service (excessive database lookup calls and server hang) via a request with many repea...

5. CVE-2012-2654 OpenStack Compute (Nova) Improper Input Validation

   Published 2012-06-21

   Medium·CVSS 4.3 EPSS 2.6%

   The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remote attackers to bypas...

6. CVE-2012-2101 Openstack Compute (Nova) Denial of service via network request that triggers large number of iptables rules

   Published 2012-06-07

   Low·CVSS 3.5 EPSS 1.5%

   Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service (CPU and hard drive consumption) via a network request that triggers a large number...

7. CVE-2012-2144 OpenStack Horizon Session Fixation

   Published 2012-06-05

   Medium·CVSS 6.8 EPSS 2.1%

   Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.

8. CVE-2012-2094 OpenStack Horizon Cross-site scripting (XSS) vulnerability

   Published 2012-06-05

   Medium·CVSS 4.3 EPSS 2.4%

   Cross-site scripting (XSS) vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the guest console.

9. CVE-2012-0030 Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI para...

   Published 2012-01-13

   Medium·CVSS 4.9 EPSS 1.7%

   Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI parameter.

10. CVE-2011-4596 OpenStack Nova Multiple directory traversal vulnerabilities

    Published 2011-12-23

    Medium·CVSS 6.0 EPSS 1.8%

    Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.