A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit this vulnerability by detaching one of their volumes from Cinder. The highest impact is to confidentiality.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NRed Hat Openstack
APPRedhatwszystkie wersje
Powiązane podatności
The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which al...
A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatu...
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass
qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers...