Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

210 records

Vendor: Red Hat Component: Openstack Clear all filters
TI-2022-02905 CVE-2022-3146 · GHSA-w4x6-6w3r-9h2m

Path traversal in tripleo-ansible

Priority LOW 24

A flaw was found in tripleo-ansible.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00202 Published 2023-03-23 Fixed CWE-22
TI-2022-02862 CVE-2022-3101 · GHSA-7x96-2w32-w3gw

Path traversal in tripleo-ansible

Priority LOW 24

A flaw was found in tripleo-ansible.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00202 Published 2023-03-23 Fixed CWE-22
TI-2022-03780 CVE-2022-4134 · GHSA-5gp5-vxj6-4257

A flaw was found in openstack-glance.

Priority LOW 14

A flaw was found in openstack-glance.

CVSS 3.1LOW 2.8 Local Low privileges User interaction EPSS 0.00326 Published 2023-03-06 Fix deferred CWE-829
TI-2022-17779 CVE-2022-38065 · GHSA-5994-4pv5-xvvm

Improper privilege management in OpenStack

Priority HIGH 73

A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00625 Published 2022-12-21 No fix listed CWE-269
TI-2022-01525 CVE-2022-1655 · GHSA-xm48-7qq2-36x4

Incorrect permission assignment in OpenStack

Priority LOW 30

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00554 Published 2022-07-22 Fixed CWE-732
TI-2021-03047 CVE-2021-4180 · GHSA-hm3x-jwwf-jpr9

Information disclosure in openstack-tripleo-heat-templates

Priority LOW 21

An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0077 Published 2022-03-23 Partial fix · 11.6.1 CWE-200
TI-2021-02598 CVE-2021-3656

Missing authorization in KVM

Priority LOW 39

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00658 Published 2022-03-04 Partial fix CWE-862
TI-2021-02566 CVE-2021-3620 · GHSA-4r65-35qq-ch8j

Information disclosure through error messages in ansible

Priority LOW 25

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0039 Published 2022-03-03 Partial fix · 2.9.27 CWE-209
TI-2020-15731 CVE-2020-25717 · GHSA-fv5q-mr4m-w2qm

Improper input validation in samba

Priority LOW 39

A flaw was found in the way Samba maps domain users to local users.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01625 Published 2022-02-18 Partial fix CWE-20
TI-2016-01947 CVE-2016-2124 · GHSA-p5c7-5xj7-x9vv

Improper authentication in samba

Priority LOW 30

A flaw was found in the way samba implemented SMB1 authentication.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01766 Published 2022-02-18 Partial fix CWE-287
TI-2021-11906 CVE-2021-31918 · GHSA-r7f5-2xmq-3252

Information disclosure in tripleo-ansible

Priority LOW 35

A flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00998 Published 2021-05-06 Fixed CWE-200
TI-2020-11225 CVE-2020-14355 · GHSA-2457-jhx6-82v4

Buffer overflow in spice

Priority LOW 34

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.02689 Published 2020-10-07 Partial fix CWE-120
TI-2020-11232 CVE-2020-14364 · GHSA-fq9g-vccc-q7c7

Out-of-bounds read in QEMU

Priority LOW 31

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0.

CVSS 3.1MEDIUM 5.0 Local High privileges No interaction EPSS 0.05402 Published 2020-08-31 Partial fix CWE-125
TI-2020-08653 CVE-2020-10756

Out-of-bounds read in Slirp

Priority LOW 29

An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.0051 Published 2020-07-09 Partial fix · 4.3.1 CWE-125
TI-2019-11104 CVE-2019-14900 · GHSA-8grg-q944-cch5

SQL injection in Hibernate

Priority LOW 33

A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02126 Published 2020-07-06 Partial fix · 5.3.18, 5.4.18 +1 CWE-89
TI-2020-08650 CVE-2020-10753 · GHSA-cggp-94xr-prm6

HTTP response splitting in Red Hat Ceph Storage

Priority LOW 32

A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway).

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0145 Published 2020-06-26 Partial fix CWE-113
TI-2020-08610 CVE-2020-10711

NULL pointer dereference in Red Hat Kernel

Priority LOW 32

A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.03083 Published 2020-05-22 Fixed in 5.7 CWE-476
TI-2020-01701 CVE-2020-1758 · GHSA-c597-f74m-jgc2

Improper certificate validation in Red Hat keycloak

Priority LOW 28

A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while sending emails using the SMTP server.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00928 Published 2020-05-15 Partial fix · 10.0.0 CWE-297
TI-2020-08588 CVE-2020-10685 · GHSA-77g3-3j5w-64w4

Exposure of resource to wrong sphere in Red Hat Ansible

Priority LOW 25

A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 whe…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00361 Published 2020-05-11 Partial fix · 2.7.17, 2.8.11 +1 CWE-459
TI-2020-01702 CVE-2020-1759 · GHSA-hcpq-vw4g-3vmh

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container…

Priority LOW 33

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attack…

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.01625 Published 2020-04-13 Partial fix CWE-323
Load more