515 matches found
DEBIAN-CVE-2026-93856
In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making the Block Storage API v3.3 "List messages" call finds the non-expired user messages for other projects included in the...
CVE-2026-93856
In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making the Block Storage API v3.3 "List messages" call finds the non-expired user messages for other projects included in the...
EUVD-2026-107047
In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making the Block Storage API v3.3 "List messages" call finds the non-expired user messages for other projects included in the...
CVE-2026-93856
In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making the Block Storage API v3.3 "List messages" call finds the non-expired user messages for other projects included in the...
CVE-2026-93856
In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making the Block Storage API v3.3 "List messages" call finds the non-expired user messages for other projects included in the...
CVE-2026-93856
In OpenStack Cinder (through version 29.0.0 ), a flaw in the Messages API allows for cross-project information disclosure . An authenticated non-admin user with project-scoped 'member' or 'reader' roles can use the Block Storage API v3.3 "List messages" call to retrieve non-expired messages belon...
CVE-2026-93856
In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making the Block Storage API v3.3 "List messages" call finds the non-expired user messages for other projects included in the...
CVE-2026-93856
In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making the Block Storage API v3.3 "List messages" call finds the non-expired user messages for other projects included in the...
PT-2026-120488
In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making the Block Storage API v3.3 "List messages" call finds the non-expired user messages for other projects included in the...
Linux Distros Unpatched Vulnerability : CVE-2026-93856
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or...
CVE-2026-93856
A flaw was found in OpenStack Cinder. An authenticated user with project-level access can retrieve messages intended for other projects by issuing a message listing request to the Block Storage API. This flaw leads to information disclosure, exposing resource identifiers and status messages...
cinderlib (5.0.0) potentially affected by CVE-2024-32498 via cinder (21.3.2)
cinder PYPI version 21.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cinder and may be impacted: - cinderlib 5.0.0 Source cves: CVE-2024-32498 Source advisory: OSV:PYSEC-2026-2414...
cinderlib (4.2.0) potentially affected by CVE-2024-32498 via cinder (20.3.2)
cinder PYPI version 20.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on cinder and may be impacted: - cinderlib 4.2.0 Source cves: CVE-2024-32498 Source advisory: OSV:PYSEC-2026-2414...
cinderlib (5.2.0), cinderlib-csi (0.0.2) +1 more potentially affected by CVE-2024-32498 via cinder (23.5.0)
cinder PYPI version 23.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cinder and may be impacted: - cinderlib 5.2.0 - cinderlib-csi 0.0.2 - ember-csi =0.9.0rc1, =0.9.1 Source cves: CVE-2024-32498 Source advisory: OSV:PYSEC-2026-2414...
cinderlib (4.1.0) potentially affected by CVE-2024-32498 via cinder (19.3.0)
cinder PYPI version 19.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cinder and may be impacted: - cinderlib 4.1.0 Source cves: CVE-2024-32498 Source advisory: OSV:PYSEC-2026-2414...
cinderlib (3.1.0) potentially affected by CVE-2024-32498 via cinder (17.4.0)
cinder PYPI version 17.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on cinder and may be impacted: - cinderlib 3.1.0 Source cves: CVE-2024-32498 Source advisory: OSV:PYSEC-2026-2414...
cinderlib (4.0.0) potentially affected by CVE-2024-32498 via cinder (18.2.1)
cinder PYPI version 18.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on cinder and may be impacted: - cinderlib 4.0.0 Source cves: CVE-2024-32498 Source advisory: OSV:PYSEC-2026-2414...
PYSEC-2026-2493 OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to...
cinderlib (5.1.0) potentially affected by CVE-2024-32498 via cinder (22.3.0)
cinder PYPI version 22.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cinder and may be impacted: - cinderlib 5.1.0 Source cves: CVE-2024-32498 Source advisory: OSV:PYSEC-2026-2414...
PYSEC-2026-2414 OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to...