Vulnerabilities for JUNO (...) - CXSECURITY.COM

Vulnerabilities for 'JUNO'

2015-06-25

CVE-2015-1851

OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command.

2014-10-26

CVE-2014-3520

CWE-310

OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated trustees to gain access to an unauthorized project for which the trustor has certain roles via the project ID in a V2 API trust token request.

2014-08-07

CVE-2014-3517

CWE-200

api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests.

>>> Vendor: Openstack 55 Products

Compute (nova) essex

Compute (nova) folsom

Python glanceclient

Python-keystoneclient

Image registry and delivery service (glance)

JUNO

Telemetry (ceilometer)

Keystonemiddleware

Ironic inspector

Tripleo heat templates

Murano-dashboard

Python-muranoclient

Cloud magnum orchestration

Instack-undercloud

Oslo.middleware

Ironic-inspector

Copyright 2024, cxsecurity.com