CVE-2013-2161

OpenStack Swift (Folsom, Grizzly, Havana) is affected by CVE-2013-2161 due to an XML injection in the account/utils.py path that handles account names. The root cause is unchecked/unvalidated user input in XML responses, allowing attackers to trigger invalid or spoofed Swift responses. Remediatio...

CVE-2013-0335

CVE-2013-0335 affects OpenStack Nova across Grizzly, Folsom (2012.2), and Essex (2012.1). The issue allows remote authenticated users to access a VM by reusing the VNC token from a deleted VM that was bound to the same VNC port. Connected advisories indicate this was addressed with a patch/update...