rhosp-director: libvirtd is deployed with no authentication

A design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable libvirtd based live-migration. Libvirtd is deployed by default by director listening on 0.0.0.0 all interfaces with no-authentication or encryption. Anyone able to make a TCP connection to any comput...

Apache Cassandra Remote Arbitrary Code Execution Vulnerability

Apache Cassandra is an open source distributed database management system developed by Facebook for storing exceptionally large data. Cassandra's default configuration binds unauthenticated JMX/RMI interfaces to all network interfaces. Since RMI is the API for transporting and remotely executing...