Red Hat OpenStack Folsom for RHEL 6
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2013-0270 | fixed in 0:2012.2.3-7.el6ost | Keystone: openstack keystone: denial of service via large http request with long tenant name | MEDIUM 6.5 | 3.2 % | ||
| CVE-2013-1815 | fixed in 0:2012.2.3-0.1.dev454.el6ost | Packstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creation | MEDIUM 6.1 | 0.5 % | ||
| CVE-2013-1840 | fixed in 0:2012.2.3-8.el6ost | Openstack glance: swift: s3: openstack glance: information disclosure of backend credentials via cached image request | MEDIUM 6.5 | 1.4 % | ||
| CVE-2013-0335 | fixed in 0:2012.2.3-7.el6ost | Openstack nova: vnc proxy can connect to the wrong vm | HIGH 7.6 | 2.1 % | ||
| CVE-2013-0266 | fixed in 0:2012.2.2-1.0.dev408.el6ost | Puppetlabs-cinder: packstack: openstack: puppetlabs-cinder: information disclosure of openstack administrative passwords due to world-rea… | MEDIUM 5.5 | 0.3 % | ||
| CVE-2013-0261 | fixed in 0:2012.2.2-1.0.dev408.el6ost | Packstack: packstack: arbitrary file overwrite via symlink attack | HIGH 8.8 | 0.3 % | ||
| CVE-2012-5625 | fixed in 0:2012.2.2-8.el6ost | Openstack nova: information leak in libvirt lvm-backed instances | MEDIUM 6.5 | 2.0 % | ||
| CVE-2012-5571 | fixed in 0:2012.2.1-1.el6ost | Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling | MEDIUM 5.4 | 2.1 % |