728 matches found
CVE-2013-6426
The cloudformation-compatible API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy rules, which allows local in-instance users to bypass intended access restrictions and 1 create a stack via the CreateStack method or 2 upda...
CVE-2013-6428
The ReST API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote authenticated users to bypass the tenant scoping restrictions via a modified tenantid in the request path...
PT-2013-6042
Name of the Vulnerable Software and Affected Versions OpenStack Orchestration API Heat versions prior to Havana 2013.2.1 OpenStack Orchestration API Heat versions prior to icehouse-2 Description The issue allows local in-instance users to bypass intended access restrictions. This can be achieved ...
PT-2013-6043
Name of the Vulnerable Software and Affected Versions OpenStack Orchestration API Heat versions before Havana 2013.2.1 OpenStack Orchestration API Heat versions before Icehouse icehouse-2 Description The issue allows remote authenticated users to bypass tenant scoping restrictions. This is achiev...
[SECURITY] Fedora 19 Update: openstack-nova-2013.1.3-2.fc19
OpenStack Compute codename Nova is open source software designed to provision and manage large networks of virtual machines, creating a redundant and scalable cloud computing platform. It gives you the software, control panels, and APIs required to orchestrate a cloud, including running instances...
[SECURITY] Fedora 19 Update: openstack-nova-2013.1.2-4.fc19
OpenStack Compute codename Nova is open source software designed to provision and manage large networks of virtual machines, creating a redundant and scalable cloud computing platform. It gives you the software, control panels, and APIs required to orchestrate a cloud, including running instances...
HP Operations Orchestration code execution
No description provided...
[security bulletin] HPSBMU02813 SSRT100712 rev.1 - HP Operations Orchestration, Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03490339 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03490339 Version: 1 HPSBMU02813...
CVE-2012-3258
Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers to execute arbitrary code via unknown vectors...
Code injection
Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2012-3258
Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2012-3258
CVE-2012-3258 affects HP Operations Orchestration version 9.0 prior to 9.03, enabling remote execution of arbitrary code via unknown vectors. The HP Security Bulletin SSRT100712 (HPSBMU02813) confirms remote code execution potential and lists patch 9.03 as the fix, with later patches (e.g., 9.05)...
CVE-2012-3258: Undefined Security Weakness
Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers to execute arbitrary code via unknown vectors...
PT-2012-4605
Name of the Vulnerable Software and Affected Versions HP Operations Orchestration version 9.0 through 9.02 Description The issue allows remote attackers to execute arbitrary code. The exact vectors used for the attack are not specified. Recommendations For HP Operations Orchestration version 9.0...
ZDI-12-172 : (0Day) HP Operations Orchestration RSScheduler Service JDBC Connector Remote Code Execution Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-172 : 0Day HP Operations Orchestration RSScheduler Service JDBC Connector Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-172 August 29, 2012 - -- CVE ID: - -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C - --...
HP Operations Orchestration SQL injection
SQL injection in TCP/9001 RSScheduler service...
(0Day) HP Operations Orchestration RSScheduler Service JDBC Connector Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Operations Orchestration. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RSScheduler service JDBC component of Operations Orchestra which liste...
[SECURITY] Fedora 17 Update: openstack-nova-2012.1.1-15.fc17
OpenStack Compute codename Nova is open source software designed to provision and manage large networks of virtual machines, creating a redundant and scalable cloud computing platform. It gives you the software, control panels, and APIs required to orchestrate a cloud, including running instances...
CVE-2010-4105
Unspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to bypass intended access restrictions, and obtain sensitive information or modify data, via unknown vectors...