CVE-2013-1838

all versions

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which all

CVE-2013-0335

all versions

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in

CVE-2013-0266

all versions

A flaw was found in the puppetlabs-cinder module, as used in PackStack. This vulnerability is due to incorrect file permissions,

5.5MEDIUM

CVE-2013-0261

all versions

A flaw was found in PackStack. A local user could exploit a symlink attack on a temporary file with a predictable name in the `/tm

8.8HIGH

CVE-2013-0208

all versions

The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated us

CVE-2012-5571

all versions

A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization rest

5.4MEDIUM

CVE-2012-5482

all versions

The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary

CVE-2012-4573

all versions

The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary

CVE-2012-3542

all versions

OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an

CVE-2012-3426

all versions

OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement t

CVE-2012-3361

all versions

virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated user

CVE-2012-3360

all versions

Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used ov

CVE-2012-3371

all versions

The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is e

CVE-2012-2654

all versions

The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check

CVE-2012-0030

all versions

Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants o