CVE-2017-7400: Improper Neutralization of Input During Web Page Generation

OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping...

PT-2017-17709

Name of the Vulnerable Software and Affected Versions OpenStack Horizon versions 9.x through 9.1.1 OpenStack Horizon versions 10.x through 10.0.2 OpenStack Horizon version 11.0.0 Description The issue allows remote authenticated administrators to conduct cross-site scripting XSS attacks by using ...

Unauthorized Read Access

openstack-magnum is vulnerable to unauthorized read access. The vulnerability exists as the permissions for /etc/sysconfig/heat-params in openstack-magnum was 0644, which gave read access to non-root users...

DEBIAN-CVE-2015-8234

The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision...

CVE-2015-8234

The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision...

UBUNTU-CVE-2015-8234

The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision...

PYSEC-2017-143

The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision...

CVE-2015-8234

The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision...

PYSEC-2017-143

The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision...

Design/Logic Flaw

The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision...

CVE-2015-8234

The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision...

CVE-2015-8234

The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision...

CVE-2015-8234

The CVE-2015-8234 entry concerns OpenStack Glance 11.0.0, where the image signature verification can be bypassed by processing a crafted image. The underlying issue is tied to an MD5 collision in the image signature algorithm, enabling remote attackers to bypass verification. The available connec...

CVE-2015-8234

The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision...

CVE-2015-8234

The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision...

PT-2017-7361

Name of the Vulnerable Software and Affected Versions OpenStack Glance version 11.0.0 Description The issue allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision. Recommendations For OpenStack Glance version 11.0.0, at the moment...

CVE-2015-8234: Undefined Security Weakness

The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision...

OpenStack Glance Security Bypass Vulnerability (CNVD-2017-04094)

OpenStack is a cloud platform management project developed by the National Aeronautics and Space Administration and Rackspace, Inc. Glance is a project that stores, queries and retrieves virtual machine images. A security bypass vulnerability exists in OpenStack Glance, which can be exploited by ...

OpenStack Nova Information Disclosure Vulnerability (CNVD-2017-04265)

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration in collaboration with Rackspace, Inc.OpenStack Nova is one of the cloud computing construct controllers written in Python that is part of the IaaS system. It is part of the IaaS system....

CVE-2017-7214

An issue was discovered in exceptionwrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens...