48 matches found
CVE-2013-6428
The ReST API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote authenticated users to bypass the tenant scoping restrictions via a modified tenantid in the request path...
CVE-2013-6428
The ReST API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote authenticated users to bypass the tenant scoping restrictions via a modified tenantid in the request path...
CVE-2013-6426: Undefined Security Weakness
The cloudformation-compatible API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy rules, which allows local in-instance users to bypass intended access restrictions and 1 create a stack via the CreateStack method or 2 upda...
CVE-2013-6428: Undefined Security Weakness
The ReST API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote authenticated users to bypass the tenant scoping restrictions via a modified tenantid in the request path...
CVE-2013-6426
The cloudformation-compatible API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy rules, which allows local in-instance users to bypass intended access restrictions and 1 create a stack via the CreateStack method or 2 upda...
CVE-2013-6428
The ReST API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote authenticated users to bypass the tenant scoping restrictions via a modified tenantid in the request path...
PT-2013-6042
Name of the Vulnerable Software and Affected Versions OpenStack Orchestration API Heat versions prior to Havana 2013.2.1 OpenStack Orchestration API Heat versions prior to icehouse-2 Description The issue allows local in-instance users to bypass intended access restrictions. This can be achieved ...
PT-2013-6043
Name of the Vulnerable Software and Affected Versions OpenStack Orchestration API Heat versions before Havana 2013.2.1 OpenStack Orchestration API Heat versions before Icehouse icehouse-2 Description The issue allows remote authenticated users to bypass tenant scoping restrictions. This is achiev...