Red Hat Security AdvisoryRHSA-2013:0658
openstack-cinder security and enhancement update
Released 2013-03-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- OpenStack Folsom openstack-cinder-2012.2.3-4.el6ost, openstack-cinder-doc-2012.2.3-4.el6ost, python-cinder-2012.2.3-4.el6ost
Fixes 2 records
Priority LOW 30
The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04507 · Published 2013-04-03 · Partial fix · 1.3.6, 1.4.4 CWE-200
Priority LOW 30
The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote at…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04771 · Published 2013-04-03 · Partial fix · 1.3.6, 1.4.4 CWE-119
