PT-2019-7842

Name of the Vulnerable Software and Affected Versions OpenStack Magnum affected versions not specified Description The issue allows full API access, enabling any API operation the user is authorized to perform, as OpenStack Magnum passes OpenStack credentials into the Heat templates creating its...

Unauthorized Read Access

openstack-magnum is vulnerable to unauthorized read access. The vulnerability exists as the permissions for /etc/sysconfig/heat-params in openstack-magnum was 0644, which gave read access to non-root users...