CVE-2014-5356: Undefined Security Weakness

OpenStack Image Registry and Delivery Service Glance before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the imagesizecap configuration option, which allows remote authenticated users to cause a denial of service disk consumption by...

CVE-2014-5356

OpenStack Image Registry and Delivery Service Glance before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the imagesizecap configuration option, which allows remote authenticated users to cause a denial of service disk consumption by...

CVE-2013-2059

OpenStack Identity Keystone Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authentication token when deleting a user through the Keystone v2 API, which allows remote authenticated users to retain access via the token...

PT-2013-3522

Name of the Vulnerable Software and Affected Versions OpenStack Identity Keystone versions Folsom 2012.2.4 and earlier OpenStack Identity Keystone versions Grizzly before 2013.1.1 Description The issue allows remote authenticated users to retain access via an authentication token even after a use...

CVE-2013-2059: Improper Authentication

OpenStack Identity Keystone Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authentication token when deleting a user through the Keystone v2 API, which allows remote authenticated users to retain access via the token...

Ubuntu Update for keystone USN-1830-1

Check for the Version of keystone OpenVAS Vulnerability Test $Id: gbubuntuUSN18301.nasl 8448 2018-01-17 16:18:06Z teissa $ Ubuntu Update for keystone USN-1830-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Ubuntu 12.04 LTS / 12.10 / 13.04 : keystone vulnerability (USN-1830-1)

Sam Stoelinga discovered that Keystone would not immediately invalidate tokens when deleting users via the v2 API. A deleted user would be able to continue to use resources until the token lifetime expired. Note that Tenable Network Security has extracted the preceding description block directly...

Ubuntu Update for glance USN-1626-2

Ubuntu Update for Linux kernel vulnerabilities USN-1626-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN16262.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for glance USN-1626-2 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu 12.10 : glance vulnerability (USN-1626-2)

USN-1626-1 fixed vulnerabilities in the v1 API of Glance. This update provides the corresponding updates for the v2 API. Gabe Westmaas discovered that Glance did not always properly enforce access controls when deleting images. An authenticated user could delete arbitrary images by using the v1 A...

CVE-2012-5482

The v2 API in OpenStack Glance Grizzly, Folsom 2012.2, and Essex 2012.1 allows remote authenticated users to delete arbitrary non-protected images via an image deletion request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4573...

PT-2012-5993

Name of the Vulnerable Software and Affected Versions OpenStack Glance versions 2012.1 through 2012.2 Description The issue allows remote authenticated users to delete arbitrary non-protected images via an image deletion request to the v2 API. This is due to an incomplete fix for a previous issue...