Difference between revisions of "SecurityAdvisories/Essex"
| Line 65: | Line 65: | ||
| Security groups fail to be set correctly | | Security groups fail to be set correctly | ||
| Medium | | Medium | ||
| + | |- | ||
| + | |rowspan=3 |Keystone | ||
| + | |rowspan=3 |July 27, 2012 | ||
| + | |rowspan=3 |[https://lists.launchpad.net/openstack/msg15164.html 2012-010] | ||
| + | |rowspan=3 |[https://bugs.launchpad.net/bugs/cve/2012-3426 2012-3426] | ||
| + | |rowspan=3 |Various Keystone token expiration issues | ||
| + | |rowspan=3 |Medium | ||
| + | |- | ||
| + | |- | ||
Revision as of 07:15, 30 July 2012
Essex Security Advisories
| Product | Date | Openstack Security Advisory | CVE Number | Title | Impact |
| Nova | July 3, 2012 | 2012-008 | 2012-3360 | Arbitrary file injection/corruption through directory traversal issues | Critial |
| Nova | July 11, 2012 | 2012-009 | 2012-3371 | Scheduler denial of service through scheduler_hints | Medium |
Fixed in 2012.1.1
| Product | Date | Openstack Security Advisory | CVE Number | Title | Impact |
| Horizon | April 17, 2012 | 2012-004 | 2012-2094 | XSS vulnerability in Horizon log viewer | High |
| Nova | April 19, 2012 | 2012-005 | 2012-2101 | No quota enforced on security group rules | High |
| Horizon | May 4, 2012 | 2012-006 | 2012-2144 | Horizon session fixation and reuse | Critical |
| Nova | June 6, 2012 | 2012-007 | 2012-2654 | Security groups fail to be set correctly | Medium |
| Keystone | July 27, 2012 | 2012-010 | 2012-3426 | Various Keystone token expiration issues | Medium |
