Openstack vulnerabilities
322 vulnerabilities
Known vulnerabilities in Openstack products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 74 products.
Products
50 of 74- Keystone49 vulnerabilities
- Nova40 vulnerabilities
- Neutron28 vulnerabilities
- Folsom24 vulnerabilities
- Horizon24 vulnerabilities
- Swift19 vulnerabilities
- Ironic16 vulnerabilities
- Image Registry And Delivery Service \(Glance\)15 vulnerabilities
- Grizzly14 vulnerabilities
- Essex13 vulnerabilities
- Compute12 vulnerabilities
- Glance12 vulnerabilities
- Havana11 vulnerabilities
- Cinder9 vulnerabilities
- Heat7 vulnerabilities
- Python Keystoneclient7 vulnerabilities
- Barbican5 vulnerabilities
- Mistral5 vulnerabilities
- Octavia5 vulnerabilities
- Designate4 vulnerabilities
- Icehouse4 vulnerabilities
- Keystonemiddleware4 vulnerabilities
- Tripleo Heat Templates4 vulnerabilities
- Ironic Python Agent3 vulnerabilities
- Openstack3 vulnerabilities
- Trove3 vulnerabilities
- Zaqar3 vulnerabilities
- Blazar2 vulnerabilities
- Ceilometer2 vulnerabilities
- Cloud Magnum Orchestration2 vulnerabilities
- Cyborg2 vulnerabilities
- Diablo2 vulnerabilities
- Keystone Essex2 vulnerabilities
- Magnum2 vulnerabilities
- Manila2 vulnerabilities
- Murano2 vulnerabilities
- Oslo2 vulnerabilities
- Tripleo Ansible2 vulnerabilities
- Aodh1 vulnerabilities
- Blazar Dashboard1 vulnerabilities
- Cinder Folsom1 vulnerabilities
- Compute \(Nova\)1 vulnerabilities
- Compute \(Nova\) Essex1 vulnerabilities
- Compute \(Nova\) Folsom1 vulnerabilities
- Devstack1 vulnerabilities
- Glance Store1 vulnerabilities
- Instack Undercloud1 vulnerabilities
- Ironic Inspector1 vulnerabilities
- Ironic Python Agent1 vulnerabilities
- Juno1 vulnerabilities
CVE-2018-16856ubuntuoctavia+15
EPSS score0.89%
In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and openstack-octavia-3.0.1-0.20181009115732 creates log files that are readable by all users. Sensitive information such as private keys can appear in these log files allowing for information exposure.CVE-2018-20170ubuntukeystone+2EPSS score1.12%
OpenStack Keystone through 14.0.1 has a user enumeration vulnerability because invalid usernames have much faster responses than valid ones for a POST /v3/auth/tokens request. NOTE: the vendor's position is that this is a hardening opportunity, and not necessarily an issue that should have an OpenStack Security AdvisoryCVE-2018-14432debiankeystone+186EPSS score1.60%
In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an authenticated "GET /v3/OS-FEDERATION/projects" request may bypass intended access restrictions on listing projects. An authenticated user may discover projects they have no authority to access, leaking all projects in the deployment and their attributes. Only Keystone with the /v3/OS-FEDERATION endpoint enabled via policy.json is affected.CVE-2018-14635debianneutron+16EPSS score2.53%
When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from outside of the allowed allocation pool. Versions of openstack-neutron before 13.0.0.0b2, 12.0.3 and 11.0.5 are vulnerable.CVE-2018-14636debianneutron+4EPSS score1.17%
Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if the instance's port is set administratively down prior to live-migration and kept down after the migration is complete. This is possible due to the Open vSwitch integration bridge being connected to the instance during migration. When connected to the integration bridge, all traffic for instances using the same Open vSwitch instance would potentially be visible to the migrated guest, as the required Open vSwitch VLAN filters are only applied post-migration. Versions of openstack-neutron before 13.0.0.0b2, 12.0.3, 11.0.5 are vulnerable.CVE-2018-10898ubuntutripleo-heat-templates+11EPSS score0.89%
A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director using default configuration, Opendaylight in RHOSP13 is configured with easily guessable default credentials.CVE-2013-2014debiankeystone+3EPSS score3.27%
OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests.CVE-2013-2256chainguardopenstack-nova-2025.1+6EPSS score1.84%
OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id.CVE-2013-2161debianswift+11EPSS score1.91%
XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.CVE-2013-2059debiankeystone+2EPSS score2.47%
OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authentication token when deleting a user through the Keystone v2 API, which allows remote authenticated users to retain access via the token.CVE-2013-2006debiankeystone+5EPSS score0.61%
OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file.CVE-2013-2096debiannova+4EPSS score0.39%
OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by creating an image with a large virtual size that does not contain a large amount of data.CVE-2013-2030openstackcompute+4EPSS score0.24%
keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.CVE-2013-2013debianpython-keystoneclient+2EPSS score0.37%
The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the process.CVE-2013-2104debianpython-keystoneclient+4EPSS score2.08%
python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remote authenticated users to (1) retain use of a token after it has expired, or (2) use a revoked token once it expires.CVE-2013-2167debianpython-keystoneclient+5EPSS score1.97%
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypassCVE-2013-2166debianpython-keystoneclient+6EPSS score2.15%
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypassCVE-2013-2255debiankeystone+8EPSS score0.97%
HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.CVE-2013-2157debiankeystone+4EPSS score3.13%
OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.CVE-2013-1865canonicalubuntu_linux+2EPSS score2.63%
OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.