CVE-2016-7404

CVE-2016-7404 affects OpenStack Magnum where credentials are passed into Heat templates for instance creation. The underlying issue is that these credentials, intended for SSL certificate retrieval, can be exploited to perform any API operation the user is authorized to perform, enabling full API...

CVE-2024-28718

The OpenStack magnum yoga-eom version is vulnerable to Remote Code Execution (RCE) . This is caused by a time-of-check to time-of-use (TOCTOU) race condition within the cert_manager.py component. A remote attacker can exploit this race condition to execute arbitrary code on the system. While the ...