Red Hat OpenStack Folsom for RHEL 6
8 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2013-0270 | corrigé en 0:2012.2.3-7.el6ost | Keystone: openstack keystone: denial of service via large http request with long tenant name | MEDIUM 6.5 | 3.2 % | ||
| CVE-2013-1815 | corrigé en 0:2012.2.3-0.1.dev454.el6ost | Packstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creation | MEDIUM 6.1 | 0.5 % | ||
| CVE-2013-1840 | corrigé en 0:2012.2.3-8.el6ost | Openstack glance: swift: s3: openstack glance: information disclosure of backend credentials via cached image request | MEDIUM 6.5 | 1.4 % | ||
| CVE-2013-0335 | corrigé en 0:2012.2.3-7.el6ost | Openstack nova: vnc proxy can connect to the wrong vm | HIGH 7.6 | 2.1 % | ||
| CVE-2013-0266 | corrigé en 0:2012.2.2-1.0.dev408.el6ost | Puppetlabs-cinder: packstack: openstack: puppetlabs-cinder: information disclosure of openstack administrative passwords due to world-rea… | MEDIUM 5.5 | 0.3 % | ||
| CVE-2013-0261 | corrigé en 0:2012.2.2-1.0.dev408.el6ost | Packstack: packstack: arbitrary file overwrite via symlink attack | HIGH 8.8 | 0.3 % | ||
| CVE-2012-5625 | corrigé en 0:2012.2.2-8.el6ost | Openstack nova: information leak in libvirt lvm-backed instances | MEDIUM 6.5 | 2.0 % | ||
| CVE-2012-5571 | corrigé en 0:2012.2.1-1.el6ost | Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling | MEDIUM 5.4 | 2.1 % |