9726 matches found
CVE-2012-5474
The file /etc/openstack-dashboard/localsettings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release python-django-horizon package before 2012.1.1 is world readable and exposes the secret key value...
CVE-2012-5474
The file /etc/openstack-dashboard/localsettings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release python-django-horizon package before 2012.1.1 is world readable and exposes the secret key value...
CVE-2012-5474
Affected software : Red Hat OpenStack Platform 2.0 and RHOS Essex Release (python-django-horizon package before 2012.1.1). Vulnerability : the file /etc/openstack-dashboard/local_settings is world readable, exposing the secret key value. Impact (as described) : exposure of secret key information;...
CVE-2012-5476
Within the RHOS Essex Preview 2012.2 of the OpenStack dashboard package, the file /etc/quantum/quantum.conf is world readable which exposes the admin password and token value...
CVE-2012-5476
Within the RHOS Essex Preview 2012.2 of the OpenStack dashboard package, the file /etc/quantum/quantum.conf is world readable which exposes the admin password and token value...
CVE-2012-5476
OpenStack RHOS Essex Preview (2012.2) dashboard package contains a vulnerability where /etc/quantum/quantum.conf is world readable, exposing the admin password and token value. Affected component: OpenStack dashboard configuration on RHOS Essex Preview 2012.2. Root cause: file permissions misconf...
CVE-2012-5476: Exposure of Sensitive Information to an Unauthorized Actor
Within the RHOS Essex Preview 2012.2 of the OpenStack dashboard package, the file /etc/quantum/quantum.conf is world readable which exposes the admin password and token value...
PT-2019-6786
Name of the Vulnerable Software and Affected Versions OpenStack dashboard package version 2012.2 Description The issue concerns a file, /etc/quantum/quantum.conf, being world readable. This exposes sensitive information, including the admin password and token value. Recommendations For version...
CVE-2012-5474: Missing Encryption of Sensitive Data
The file /etc/openstack-dashboard/localsettings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release python-django-horizon package before 2012.1.1 is world readable and exposes the secret key value...
PT-2019-6785
Name of the Vulnerable Software and Affected Versions Red Hat OpenStack Platform versions 2.0 python-django-horizon package versions prior to 2012.1.1 Description The issue concerns a file, /etc/openstack-dashboard/local settings, that is world readable. This exposes the secret key value...
Important: Red Hat Security Advisory: openstack-keystone security update
An update for openstack-keystone is now available for Red Hat OpenStack Platform 15 Stein. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
openstack-keystone: Credentials API allows non-admin to list and retrieve all users credentials
A disclosure vulnerability was found in openstack-keystone's credentials API. Users with a project role are able to list any credentials with the /v3/credentials API when enforcescope is false. Information for time-based one time passwords TOTP may also be disclosed. Deployments running keystone...
CVE-2019-19687
A disclosure vulnerability was found in openstack-keystone's credentials API. Users with a project role are able to list any credentials with the /v3/credentials API when enforcescope is false. Information for time-based one time passwords TOTP may also be disclosed. Deployments running keystone...
CVE-2013-1793
openstack-utils openstack-db has insecure password creation...
Default credentials
openstack-utils openstack-db has insecure password creation...
CVE-2013-1793
CVE-2013-1793 concerns openstack-utils and openstack-db with insecure password creation. The available connected documents confirm the affected components but do not provide remediation details. NVD metrics indicate a Network attack vector with no authentication required, and a high impact on con...
CVE-2013-1793
openstack-utils openstack-db has insecure password creation...
Information Disclosure
openstack keystone is vulnerable to information disclosure. Any authenticated user is able to list the credentials of any user using the /v3/credentials API when enforcescope is set to false. The leaked credentials include sign-on information for Time-based OTP...
OpenStack Nova Information Disclosure Vulnerability (CNVD-2019-44961)
OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration and Rackspace, Inc. in the U.S. OpenStack Nova is one of the cloud computing construct controllers written in Python. It is part of the IaaS system. An information disclosure...