1928 matches found
Access Control Bypass
Overview swift is an OpenStack Object Storage Affected versions of this package are vulnerable to Access Control Bypass via the ec2tokens or s3tokens process when a request with a valid AWS Signature is accepted for authorization. An attacker can gain unauthorized access by submitting specially...
CVE-2025-65073
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization...
HSEC-2023-0013 git-annex plaintext storage of embedded credentials on encrypted remotes
git-annex plaintext storage of embedded credentials on encrypted remotes git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS credentials were stored in the Git repository in effectively...
CVE-2024-47866
Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no...
CVE-2024-47866
CVE-2024-47866 affects Ceph RGW: using x-amz-copy-source with an empty string as object content can crash RGW and cause DoS in Ceph versions up to 19.2.3. Public details confirm impact is a denial of service; no patch in initial disclosure. Some connected advisories note fixes or mitigations in d...
USN-7857-1: OpenStack Keystone vulnerability
Kay discovered that OpenStack Keystone incorrectly handled the ec2tokens and s3tokens APIs. A remote attacker could possibly use this issue to obtain unauthorized access and escalate privileges...
UBUNTU-CVE-2025-65073
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization...
CVE-2025-58187 vulnerabilities
Vulnerabilities for packages: kratos, mods, prometheus-adapter, custom-pod-autoscaler, licenseclassifier, velero-plugin-for-microsoft-azure, terraform-provider-azapi, hivemind, terraform, kubernetes-csi-node-driver-registrar, elvish, grpcurl, runc, smarter-device-manager, wazero, go-bindata,...
CVE-2025-61724 vulnerabilities
Vulnerabilities for packages: kpt, ctop, ferretdb, kratos, harbor, mods, prometheus-adapter, skopeo, cluster-api-helm-controller, gostatsd, custom-pod-autoscaler, licenseclassifier, velero-plugin-for-microsoft-azure, kubecolor, rancher-helm, skaffold, terraform-provider-azapi, vexctl, hivemind,...
GHSA-FRHW-MQJ2-WXW2 vulnerabilities
Vulnerabilities for packages: kratos, mods, prometheus-adapter, custom-pod-autoscaler, licenseclassifier, velero-plugin-for-microsoft-azure, terraform-provider-azapi, hivemind, terraform, kubernetes-csi-node-driver-registrar, elvish, grpcurl, runc, smarter-device-manager, wazero, go-bindata,...
GHSA-WCW9-47FP-RRFR vulnerabilities
Vulnerabilities for packages: kpt, ctop, ferretdb, kratos, harbor, mods, prometheus-adapter, skopeo, cluster-api-helm-controller, gostatsd, custom-pod-autoscaler, licenseclassifier, velero-plugin-for-microsoft-azure, kubecolor, rancher-helm, skaffold, terraform-provider-azapi, vexctl, hivemind,...
CVE-2025-47912 vulnerabilities
Vulnerabilities for packages: kpt, ctop, ferretdb, kratos, harbor, mods, prometheus-adapter, skopeo, cluster-api-helm-controller, gostatsd, custom-pod-autoscaler, licenseclassifier, velero-plugin-for-microsoft-azure, kubecolor, rancher-helm, skaffold, terraform-provider-azapi, vexctl, hivemind,...
CVE-2025-58185 vulnerabilities
Vulnerabilities for packages: kpt, ctop, ferretdb, kratos, harbor, mods, prometheus-adapter, skopeo, cluster-api-helm-controller, gostatsd, custom-pod-autoscaler, licenseclassifier, velero-plugin-for-microsoft-azure, kubecolor, rancher-helm, skaffold, terraform-provider-azapi, vexctl, hivemind,...
CVE-2025-58186 vulnerabilities
Vulnerabilities for packages: kpt, ctop, ferretdb, kratos, harbor, mods, prometheus-adapter, skopeo, cluster-api-helm-controller, gostatsd, custom-pod-autoscaler, licenseclassifier, velero-plugin-for-microsoft-azure, kubecolor, rancher-helm, skaffold, terraform-provider-azapi, vexctl, hivemind,...
CVE-2025-61723 vulnerabilities
Vulnerabilities for packages: kpt, ctop, ferretdb, kratos, harbor, mods, prometheus-adapter, skopeo, cluster-api-helm-controller, gostatsd, custom-pod-autoscaler, licenseclassifier, velero-plugin-for-microsoft-azure, kubecolor, rancher-helm, skaffold, terraform-provider-azapi, vexctl, hivemind,...
CVE-2025-61725 vulnerabilities
Vulnerabilities for packages: kpt, ctop, ferretdb, kratos, harbor, mods, prometheus-adapter, skopeo, cluster-api-helm-controller, gostatsd, custom-pod-autoscaler, licenseclassifier, velero-plugin-for-microsoft-azure, kubecolor, rancher-helm, skaffold, terraform-provider-azapi, vexctl, hivemind,...
GHSA-QH38-484V-W52X vulnerabilities
Vulnerabilities for packages: kpt, ctop, ferretdb, kratos, harbor, mods, prometheus-adapter, skopeo, cluster-api-helm-controller, gostatsd, custom-pod-autoscaler, licenseclassifier, velero-plugin-for-microsoft-azure, kubecolor, rancher-helm, skaffold, terraform-provider-azapi, vexctl, hivemind,...
GHSA-RJCG-56PH-3QVG vulnerabilities
Vulnerabilities for packages: kpt, ctop, ferretdb, kratos, harbor, mods, prometheus-adapter, skopeo, cluster-api-helm-controller, gostatsd, custom-pod-autoscaler, licenseclassifier, velero-plugin-for-microsoft-azure, kubecolor, rancher-helm, skaffold, terraform-provider-azapi, vexctl, hivemind,...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: kpt, ctop, ferretdb, kratos, harbor, mods, prometheus-adapter, skopeo, cluster-api-helm-controller, gostatsd, custom-pod-autoscaler, licenseclassifier, velero-plugin-for-microsoft-azure, kubecolor, rancher-helm, skaffold, terraform-provider-azapi, vexctl, hivemind,...
GHSA-CXQ7-XW9V-RCV3 vulnerabilities
Vulnerabilities for packages: kpt, ctop, ferretdb, kratos, harbor, mods, prometheus-adapter, skopeo, cluster-api-helm-controller, gostatsd, custom-pod-autoscaler, licenseclassifier, velero-plugin-for-microsoft-azure, kubecolor, rancher-helm, skaffold, terraform-provider-azapi, vexctl, hivemind,...