204 matches found
RHSA-2016:0127 Red Hat Security Advisory: openstack-swift security update
Bulletin has no description...
RHSA-2016:0328 Red Hat Security Advisory: openstack-swift security update
Bulletin has no description...
RHSA-2016:0329 Red Hat Security Advisory: openstack-swift security update
Bulletin has no description...
RHSA-2016:0128 Red Hat Security Advisory: openstack-swift security update
Bulletin has no description...
RHSA-2016:0155 Red Hat Security Advisory: openstack-swift security update
Bulletin has no description...
RHSA-2015:1895 Red Hat Security Advisory: openstack-swift security update
Bulletin has no description...
RHSA-2015:1681 Red Hat Security Advisory: openstack-swift security update
Bulletin has no description...
RHSA-2015:1684 Red Hat Security Advisory: openstack-swift security update
Bulletin has no description...
RHSA-2015:0835 Red Hat Security Advisory: openstack-swift security update
Bulletin has no description...
RHSA-2015:0836 Red Hat Security Advisory: openstack-swift security update
Bulletin has no description...
RHSA-2012:1379 Red Hat Security Advisory: openstack-swift security update
Bulletin has no description...
RHEL 6 : openstack-swift-plugin-swift3 (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - openstack-swift-plugin3: replay attack - date/date header unvalidated CVE-2015-8466 Note that Nessus has not tested...
RHEL 7 : openstack-swift (RHSA-2015:1681)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1681 advisory. OpenStack Object Storage swift provides object storage in virtual containers, which allows users to store and retrieve files arbitrary data. The...
RHEL 7 : openstack-swift (RHSA-2014:0941)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:0941 advisory. OpenStack Object Storage Swift provides object storage in virtual containers, which allows users to store and retrieve files arbitrary data. It was...
SUSE-SU-2023:2378-1 Security update for openstack-heat, openstack-swift, python-Werkzeug
This update for openstack-heat, openstack-swift, python-Werkzeug contains the following fixes: Security fixes included in this update: openstack-heat: - CVE-2023-1625: Fixed an issue where parameter values marked as 'hidden' would be shown in the stack's environment bsc1209774. openstack-swift: -...
openstack-swift: Arbitrary file access through custom S3 XML entities
A flaw was found in Swift's S3 XML parser. By supplying specially crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This issue impacts both s3api...
openstack-swift: Arbitrary file access through custom S3 XML entities
A flaw was found in Swift's S3 XML parser. By supplying specially crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This issue impacts both s3api...
SUSE CVE-2012-4406
OpenStack Object Storage swift before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object...
SUSE CVE-2013-2161
XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name...
SUSE CVE-2013-4155
OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service "superfluous" tombstone consumption and Swift cluster slowdown via a DELETE request with a timestamp that is older than expected...