GHSA-Q45H-CHC8-HVP6 OpenStack Object Storage (Swift) Sensitive Data Exposure

OpenStack Object Storage Swift before 2.4.0 allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest that references an object in another container...

Apache Tapestry Unsafe Object Storage

Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to cause a denial of service resource consumption or execute arbitrary code via crafted serialized data...

Virtuozzo Hybrid Infrastructure 5.0 Update 1.2 (5.0.1-55)

This update provides stability and performance fixes. Vulnerability id: VSTOR-51857, VSTOR-52213 Stability fixes for object storage. Vulnerability id: VSTOR-52492 A performance fix for iSCSI...

CVE-2022-24842

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. A security issue was found where an non-admin user is able to create service accounts for root or other admin users and then is able to assume their access policies via the generated credentials. Thi...

Design/Logic Flaw

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. A security issue was found where an non-admin user is able to create service accounts for root or other admin users and then is able to assume their access policies via the generated credentials. Thi...

CVE-2022-24842

MinIO CVE-2022-24842 involves an improper privilege management flaw where a non-admin user can create service accounts for root or other admin users and then assume those credentials, enabling privilege escalation to root. Public sources confirm affected MinIO deployments and that the issue has b...

CVE-2022-24842 Improper Privilege Management in MinIO

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. A security issue was found where an non-admin user is able to create service accounts for root or other admin users and then is able to assume their access policies via the generated credentials. Thi...

CORTX-S3 Server 安全漏洞

CORTX-S3 Server is is an object storage service with high data availability, persistence, scalability, performance and security. A security vulnerability exists in CORTX-S3 Server that stems from a denial of service vulnerability in CORTX-S3 Server due to a failure to release a lock pool - lock...

Virtuozzo Hybrid Infrastructure 5.0 Update 1.1 (5.0.1-53)

This update provides security and stability fixes. Vulnerability id: VSTOR-51927 A security fix for CVE-2022-0378. Vulnerability id: VSTOR-51506 Fixed a connectivity issue when an Open vSwitch bridge is recreated for VLAN physical networks. Vulnerability id: VSTOR-51357 Entering maintenance may g...

WordPress plugin 跨站脚本漏洞

WordPress is a set of blogging platform developed by Wordpress Foundation using PHP language. WordPress plugin is a WordPress application plugin. WordPress Sync QCloud COS plugin version prior to 2.0.1 contains a cross-site scripting vulnerability that stems from the plugin's failure to escape so...

Virtuozzo Hybrid Infrastructure 5.0 (5.0.0-140)

This hotfix update provides important fixes for the storage, Backup Gateway, and object storage services. Vulnerability id: VSTOR-50690 Invalid JSON data is returned for the S3 Usage Object. Vulnerability id: VSTOR-50626 Different storage services may not restart due to a deadlock in the signal...

Virtuozzo Hybrid Infrastructure 5.0 (5.0.0-137)

In this release, Virtuozzo Hybrid Infrastructure provides a wide range of new features that enhance service providers' interoperability and help expand their services. The improvements cover compute services, object storage, security, and monitoring. Additionally, this release delivers stability...

Virtuozzo Hybrid Infrastructure 4.7 Update 1.3

This update synchronizes the MDS state, which can be unsynchronized due to previous issues, and provides important fixes for the FUSE, object storage, and compute services. Vulnerability id: VSTOR-49963 Synchronize the MDS state during an upgrade. Vulnerability id: VSTOR-50181 Fix the upgrade err...

high-availability-object-storage (0.1.8), saz-tools (>=0.0.10, <=0.0.17) potentially affected by CVE-2022-0355 via simple-get (4.0.0)

simple-get NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on simple-get and may be impacted: - high-availability-object-storage 0.1.8 - saz-tools =0.0.10, =0.0.17 Source cves: CVE-2022-0355 Source advisory: OSV:GHSA-WPG7-2C88-R8XV...

The vulnerability of the Ceph software object storage network, related to authentication procedures that allow attackers to access confidential data, compromise the integrity of those data, and cause service failures.

The vulnerability of the Ceph software object networking system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential data, compromise its integrity, and even cause service failures...

Minio MinIO has an unspecified vulnerability

Minio MinIO is an open source object storage server from MinIO USA. The product supports building infrastructure for machine learning, analytics, and application data workloads.MinIO has a security vulnerability that stems from the fact that MinIO is a native application for Kubernetes cloud...

VMware Response to Apache Log4j Remote Code Execution Vulnerabilities (CVE-2021-44228, CVE-2021-45046)

1. Impacted Products VMware Horizon VMware vCenter Server VMware HCX VMware NSX-T Data Center VMware Unified Access Gateway VMware WorkspaceOne Access VMware Identity Manager VMware vRealize Operations VMware vRealize Operations Cloud Cloud Proxy VMware vRealize Automation VMware vRealize...

Using Object Storage with Veeam Products

Summary Veeam Backup & Replication supports object storage as a destination for long-term data storage. Similarly, Veeam Backup for Office 365 and cloud-specific offerings, such as Veeam Backup for AWS, Veeam Backup for Azure, Veeam Backup for Google Cloud Platform all support object storage. Thi...

Minio Access Control Error Vulnerability

Minio MinIO is an open source object storage server from the US-based MinIO Minio. The product supports building infrastructures for machine learning, analytics, and application data workloads. An access control error vulnerability exists in Minio 0.12.2 and prior versions, which stems from an...

Virtuozzo Hybrid Infrastructure 4.7

In this release, Virtuozzo Hybrid Infrastructure provides a wide range of new features that enhance service providers' interoperability and help expand their services. The improvements cover compute services, object storage, core storage, monitoring, high availability for the management node,...