CVE-2023-25812

Last updated 24 July 2024...

SUSE CVE-2016-0738

OpenStack Object Storage Swift before 2.3.1 Kilo, 2.4.x, and 2.5.x before 2.5.1 Liberty do not properly close server connections, which allows remote attackers to cause a denial of service proxy-server resource consumption via a series of interrupted requests to a Large Object URL...

SUSE CVE-2016-7480

The SplObjectStorage unserialize implementation in ext/spl/splobserver.c in PHP before 7.0.12 does not verify that a key is an object, which allows remote attackers to execute arbitrary code or cause a denial of service uninitialized memory access via crafted serialized data...

SUSE CVE-2022-3854

A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service...

How to Connect to an Object Storage Repository via Azure Blob Private Endpoints

Purpose This article documents how to configure Veeam Backup & Replication to use Azure Blob Storage Account private endpoints via Azure VPN or Azure ExpressRoute for Scale-Out Backup Repository offload to Capacity Tier or Archive Tier or to connect to an Object Storage Repository in Veeam Backup...

Virtuozzo Hybrid Server 7.5 Update 4 (7.5.4-465)

Virtuozzo Hybrid Server 7.5 Update 4 introduces new features and provides stability and usability bug fixes. It also introduces a new kernel 3.10.0-1160.80.1.vz7.191.4. Vulnerability id: PSBM-142718 Node IP was not set when changing 'vnclisten' in '/etc/libvirt/qemu.conf.' Vulnerability id:...

PT-2022-6365 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.0.0.x through 9.4.0.x Description: The issue is related to the cleartext storage of sensitive information in the S3 component, potentially leading to information disclosure. An authenticated local attacker cou...

Veeam Backup for Cloud Solutions Potential Data Loss

Challenge Possible data loss in backups created. Affected product versions: Veeam Plug-In for AWS 5.0.0.452 Veeam Plug-In for AWS 5.1.0.39 Veeam Plug-In for Microsoft Azure 4.0.0.679 Veeam Plug-In for Google Cloud 3.0.0.859 Cause While creating backups to object storage, data loss may occur withi...

Alibaba Cloud Object Storage Service 安全漏洞

Alibaba Cloud Object Storage Service Alibaba Cloud OSS is a secure, cost-effective object storage service from China's Alibaba Cloud. A security vulnerability exists in Alibaba Cloud Object Storage Service versions prior to 0.8.1, which stems from an inadvertent disclosure of incoming secret...

PT-2022-24956 · Alibaba · Aliyun-Oss-Client

Name of the Vulnerable Software and Affected Versions: aliyun-oss-client versions prior to 0.8.1 Description: The aliyun-oss-client unintentionally divulges the authentication secret. Users of this library will be affected, as the incoming secret will be disclosed unintentionally. Recommendations...

[SECURITY] Fedora 37 Update: ceph-17.2.5-1.fc37

Ceph is a massively scalable, open-source, distributed storage system that ru ns on commodity hardware and delivers object, block and file system storage...

Cloud Mobility for Dell EMC Storage Access Control Error Vulnerability

Cloud Mobility for Dell EMC Storage is a Dell USA feature that supports the transfer, storage and access of volume snapshot copies between compatible local Dell EMC storage devices and public cloud object storage. An access control error vulnerability exists in Cloud Mobility for Dell EMC Storage...

Hitachi Vantara Hitachi Content Platform Access Control Error Vulnerability

Hitachi Vantara Hitachi Content Platform is an object storage system from Hitachi Vantara, Inc. that provides massively scalable, reliable, efficient and easy-to-use storage for automated management and preservation of content. An access control error vulnerability exists in Hitachi Vantara Hitac...

Virtuozzo Hybrid Infrastructure 5.2 Update 1 (5.2.1-57)

This update provides full support for Authorization Code Flow, as well as bug fixes and improvements. Vulnerability id: VSTOR-57337 It is impossible to set the disk role to "Unassigned" while joining a node to the cluster. Vulnerability id: VSTOR-57187 Unable to add an iSCSI target with multiple...

The vulnerability of the StorageGRID object storage software, related to errors in information processing, allows a perpetrator to gain unauthorized access to protected information or modify the content of notifications.

The vulnerability of the StorageGRID object storage software lies in errors during information processing. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information or modify the content of notifications...

Unauthorized Access Vulnerability in AliCloud Object Storage OSS Improperly Configured by Some Users

AliCloud Object Storage OSS Object Storage Service is a cloud storage service. AliCloud Computing Limited Object Storage OSS some user misconfiguration exists unauthorized access vulnerability, an attacker can use the vulnerability to obtain sensitive information...

CVE-2022-35919

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. In affected versions all 'admin' users authorized for admin:ServerUpdate can selectively trigger an error that in response, returns the content of the path requested. Any normal OS system would allow...

Design/Logic Flaw

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. In affected versions all 'admin' users authorized for admin:ServerUpdate can selectively trigger an error that in response, returns the content of the path requested. Any normal OS system would allow...

CVE-2022-35919

Summary: CVE-2022-35919 affects MinIO by enabling path traversal via the admin:ServerUpdate API when an authenticated admin triggers a specific error, exposing contents readable by the MinIO process. Related sources describe affected versions and a fix path. Impact (as stated): potential exposure...

CVE-2022-35919 Authenticated requests for server update admin API allows path traversal in minio

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. In affected versions all 'admin' users authorized for admin:ServerUpdate can selectively trigger an error that in response, returns the content of the path requested. Any normal OS system would allow...