PYSEC-2026-867 OpenStack Compute (Nova) allows remote attackers to bypass intended restriction

OpenStack Compute Nova before 2014.2.4 juno and 2015.1.x before 2015.1.2 kilo do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made...

PT-2015-6130

Name of the Vulnerable Software and Affected Versions OpenStack Compute nova versions before 2014.2.4 juno OpenStack Compute nova versions 2015.1.x before 2015.1.2 kilo Description The issue allows remote authenticated users to cause a denial of service, specifically disk consumption, by deleting...

PT-2015-6790 · Openstack · Openstack Image Service

Name of the Vulnerable Software and Affected Versions: OpenStack Image Service Glance versions 2015.1.x before 2015.1.2 kilo Description: The issue allows remote authenticated users to read arbitrary files via a crafted backing file for a qcow2 image when using the V2 API. Recommendations: For...