PT-2012-5413

Name of the Vulnerable Software and Affected Versions OpenStack Keystone versions prior to 2012.1.2 OpenStack Keystone Folsom versions prior to folsom-3 Description The issue is related to the improper handling of authorization tokens for disabled tenants. This allows remote authenticated users t...

PT-2012-4720 · Openstack · Openstack Compute

Name of the Vulnerable Software and Affected Versions: OpenStack Compute Nova versions 2012.1.x through 2012.1.1 OpenStack Compute Nova versions Folsom through Folsom-2 Description: The issue allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image...