Red Hat Security Advisory

RHSA-2020:4283

openstack-cinder security update

Released 2020-10-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 16.1 openstack-cinder-1:15.3.1-1.20200914173114.00ac80b.el8ost, python3-cinder-1:15.3.1-1.20200914173114.00ac80b.el8ost

Fixes 1 record

TI-2020-08652 CVE-2020-10755 · GHSA-v3m2-pg96-w33m

Insufficiently protected credentials in Red Hat openstack-cinder

LOW 31

An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-cinder 15.x.x versions before openstack-cinder 15.2.0 and all openstack-cinder 16.x.x versions before…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01244 Published 2020-06-10 Partial fix · 14.1.0, 15.2.0 +4 CWE-522