CVE-2013-6426

The CVE-2013-6426 issue affects OpenStack Heat’s cloudformation-compatible API, where policy enforcement was inadequate, allowing in-instance users to create or update stacks via CreateStack/UpdateStack and bypass restrictions. Public disclosures in SUSE and Red Hat advisories confirm the problem...

CVE-2013-6426

The cloudformation-compatible API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy rules, which allows local in-instance users to bypass intended access restrictions and 1 create a stack via the CreateStack method or 2 upda...

CVE-2013-6428

The ReST API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote authenticated users to bypass the tenant scoping restrictions via a modified tenantid in the request path...

CVE-2013-6428: Undefined Security Weakness

The ReST API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote authenticated users to bypass the tenant scoping restrictions via a modified tenantid in the request path...

CVE-2013-6426: Undefined Security Weakness

The cloudformation-compatible API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy rules, which allows local in-instance users to bypass intended access restrictions and 1 create a stack via the CreateStack method or 2 upda...

CVE-2013-6426

The cloudformation-compatible API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy rules, which allows local in-instance users to bypass intended access restrictions and 1 create a stack via the CreateStack method or 2 upda...

CVE-2013-6428

The ReST API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote authenticated users to bypass the tenant scoping restrictions via a modified tenantid in the request path...

PT-2013-6043

Name of the Vulnerable Software and Affected Versions OpenStack Orchestration API Heat versions before Havana 2013.2.1 OpenStack Orchestration API Heat versions before Icehouse icehouse-2 Description The issue allows remote authenticated users to bypass tenant scoping restrictions. This is achiev...

PT-2013-6042

Name of the Vulnerable Software and Affected Versions OpenStack Orchestration API Heat versions prior to Havana 2013.2.1 OpenStack Orchestration API Heat versions prior to icehouse-2 Description The issue allows local in-instance users to bypass intended access restrictions. This can be achieved ...