PT-2015-6833

Name of the Vulnerable Software and Affected Versions OpenStack Image Service Glance versions prior to 2014.2.4 juno OpenStack Image Service Glance versions prior to 2015.1.2 kilo Description The issue allows remote authenticated users to bypass the storage quota and cause a denial of service dis...

OpenStack Image Service (kilo) Directory Traversal Vulnerability

OpenStack is the massively scalable cloud operating system. A directory traversal vulnerability in OpenStack Image Service 2015.1.x version kilo prior to 2015.1.2 allows an authenticated, remote user to read arbitrary files from a backup file created with the "qcow2" image...

OpenStack Compute websocket request source incorrect checksum validation hijacking vulnerability

OpenStack is a cloud computing platform developed by Rackspace and NASA to help service providers and on-premises organizations implement cloud infrastructures similar to Amazon EC2 and S3. OpenStack Compute and kilo fails to properly calibrate the source of Websocket requests vulnerability allow...