Openstack@* Security Vulnerabilities and Issues — Openstack@* CVE List

Lucene search

RedhatOpenstack*

3 matches found

CVE•added 2023/03/06 11:15 p.m.•76 views

CVE-2022-4134

A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.

2.8CVSS3.6AI score0.00091EPSS

CVE•added 2015/04/10 3:0 p.m.•62 views

CVE-2015-1842

The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a default password of CHANGEME for the pcsd daemon, which allows remote attackers to execute arbitrary shell commands via unspecified vectors.

10CVSS7.8AI score0.06719EPSS

CVE•added 2022/07/22 3:15 p.m.•56 views

CVE-2022-1655

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files, possibly leading to a loss of confidentiality and integri...

6.5CVSS6.4AI score0.00112EPSS