CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

9730 matches found

osv_debian•added 2018/07/19 1:29 p.m.•28 views

DEBIAN-CVE-2017-2673

An authorization-check flaw was discovered in federation configurations of the OpenStack Identity service keystone. An authenticated federated user could request permissions to a project and unintentionally be granted all related roles including administrative roles...

7.2CVSS6.5AI score0.02097EPSS

SaveExploits1References1

osv_cve•added 2018/07/19 1:29 p.m.•32 views

CVE-2017-2673

7.2CVSS6.5AI score

SaveExploits0References6

CVE•added 2018/07/19 1:00 p.m.•112 views

CVE-2017-2673

The CVE-2017-2673 entry concerns an authorization-check flaw in OpenStack Keystone federation configurations. An authenticated federated user could request permissions to a project and be unintentionally granted all related roles, including administrative roles, due to inadequate authorization ch...

7.2CVSS6.6AI score0.02097EPSS

SaveExploits1References6Affected Software1

Cvelist•added 2018/07/19 1:00 p.m.•53 views

CVE-2017-2673

6.8CVSS6.7AI score0.02097EPSS

SaveExploits1References6

Mend•added 2018/07/19 1:00 p.m.•7 views

CVE-2017-2673

7.6CVSS0.02097EPSS

SaveExploits1References13

Rapid7 Vulnerability Database (full)•added 2018/07/19 12:00 a.m.•7 views

CVE-2017-2673: Incorrect Authorization

7.2CVSS7AI score0.02097EPSS

SaveExploits1References3

Github Security Blog•added 2018/07/13 3:16 p.m.•39 views

oslo.middleware Information Disclosure vulnerability

python-oslo-middleware before versions 3.8.1, 3.19.1, 3.23.1 is vulnerable to an information disclosure. Software using the CatchError class could include sensitive values in a traceback's error message. System users could exploit this flaw to obtain sensitive information from OpenStack component...

5.9CVSS4.9AI score0.00442EPSS

SaveExploits0References14Affected Software2

osv_ghsa•added 2018/07/13 3:16 p.m.•35 views

GHSA-XCP8-HH74-F6MC oslo.middleware Information Disclosure vulnerability

7.1CVSS4.9AI score0.00442EPSS

SaveExploits0References15

CNVD•added 2018/07/09 12:00 a.m.•17 views

CloudBees Jenkins Openstack Cloud Plugin Information Disclosure Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is a set of Java-based continuous integration tools from CloudBees, Inc. that are used to monitor order repetitive work.Openstack Cloud Plugin is a plugin for creating Openstack cloud instances using one of the ... CloudBees Jenkins An information...

8.8CVSS8.3AI score0.01037EPSS

SaveExploits0References1

RedHat Linux•added 2018/07/05 12:26 p.m.•11 views

Moderate: Red Hat Bug Fix Advisory: Red Hat OpenStack Platform 9 director Bug Fix Advisory

Updated packages that resolve various issues are now available for Red Hat OpenStack Platform 9.0 director for RHEL 7. Red Hat OpenStack Platform director provides the facilities for deploying and monitoring a private or public infrastructure-as-a-service IaaS cloud based on Red Hat OpenStack...

7.5CVSS7AI score0.88114EPSS

SaveExploits5References7

RedHat Linux•added 2018/06/28 3:42 p.m.•86 views

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 10 Security, Bug Fix, and Enhancement Advisory

An update is now available for Red Hat OpenStack Platform 10.0 Newton for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

6.1CVSS6.6AI score0.00848EPSS

SaveExploits0References18

NVD•added 2018/06/26 5:29 p.m.•18 views

CVE-2018-1000603

A exposure of sensitive information vulnerability exists in Jenkins Openstack Cloud Plugin 2.35 and earlier in BootSource.java, InstancesToRun.java, JCloudsCleanupThread.java, JCloudsCloud.java, JCloudsComputer.java, JCloudsPreCreationThread.java, JCloudsRetentionStrategy.java, JCloudsSlave.java,...

8.8CVSS8.5AI score0.01037EPSS

SaveExploits0References1

osv_cve•added 2018/06/26 5:29 p.m.•20 views

CVE-2018-1000603

8.8CVSS8.5AI score

SaveExploits0References1

Prion•added 2018/06/26 5:29 p.m.•26 views

Design/Logic Flaw

4CVSS8.4AI score0.01037EPSS

SaveExploits0References1Affected Software1

Mend•added 2018/06/26 5:00 p.m.•3 views

CVE-2018-1000603

8.8CVSS0.01037EPSS

SaveExploits0References5

Cvelist•added 2018/06/26 5:00 p.m.•28 views

CVE-2018-1000603

8.5AI score0.01037EPSS

SaveExploits0References1

CVE•added 2018/06/26 5:00 p.m.•72 views

CVE-2018-1000603

Summary (CVE-2018-1000603): Affected product: Jenkins Openstack Cloud Plugin (versions 2.35 and earlier). The vulnerability arises in multiple OpenStack-related classes (e.g., BootSource.java, OpenstackCredentials.java, SlaveOptions.java, etc.) and allows attackers with Overall/Read access to Jen...

8.8CVSS8.4AI score0.01037EPSS

SaveExploits0References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2018/06/26 12:00 a.m.•8 views

CVE-2018-1000603: Exposure of Sensitive Information to an Unauthorized Actor

8.8CVSS7.8AI score0.01037EPSS

SaveExploits0References2

Positive Technologies•added 2018/06/26 12:00 a.m.•3 views

PT-2018-9458

Name of the Vulnerable Software and Affected Versions Jenkins Openstack Cloud Plugin versions 2.35 and earlier Description A sensitive information exposure issue exists, allowing attackers with Overall/Read access to Jenkins to connect to a specified URL using attacker-specified credentials IDs...

8.8CVSS0.01037EPSS

SaveExploits0References7

Jenkins Security Advisories•added 2018/06/25 12:00 a.m.•23 views

CSRF vulnerability and missing permission checks in Openstack Cloud Plugin allowed capturing credentials

Openstack Cloud Plugin did not perform permission checks on methods implementing form validation. This allowed users with Overall/Read access to Jenkins to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored i...

8.8CVSS8.1AI score0.01037EPSS

SaveExploits0Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by