Lucene search
+L

6 matches found

OSV
OSV
•added 2026/05/29 12:38 a.m.•18 views

GHSA-XV24-HXH9-2HH9 OpenStack Neutron has an Incorrect Authorization issue

In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags...

5.3CVSS5.8AI score0.00427EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/05/29 12:38 a.m.•18 views

OpenStack Neutron has an Incorrect Authorization issue

In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags...

5.3CVSS5.8AI score0.00427EPSS
SaveExploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/05/29 12:00 a.m.•24 views

Linux Distros Unpatched Vulnerability : CVE-2026-49299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single- tag write operations while the defined policy rules us...

5.3CVSS5.8AI score0.00427EPSS
SaveExploits0References3
NVD
NVD
•added 2026/05/28 10:17 p.m.•22 views

CVE-2026-49299

In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags...

5.3CVSS0.00427EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/05/28 9:53 p.m.•15 views

CVE-2026-49299

In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags...

5.3CVSS5.8AI score0.00427EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/28 12:00 a.m.•1 views

CVE-2026-49299: Incorrect Authorization

In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags...

5.3CVSS5.8AI score0.00427EPSS
SaveExploits0References2
Rows per page
Query Builder