PatchFirst · Vulnerabilidades recientes
Vulnerabilidades publicadas para python-glance-store en los últimos 30 días: 1. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 3
An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the _retry_request function fails to validate the destination host before attaching sensitive authentication headers.
A vulnerability was found in python-glance-store. The issue occurs when the package logs the access_key for the glance-store when the DEBUG log level is enabled.
A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit this vulnerability by detaching one of their volumes from Cinder. The highest impact is to confidentiality.
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.