Openstack

Octavia

3 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2026-74248

  • EPSS 0.19%
  • Veröffentlicht 14.08.2026 20:20:31
  • Zuletzt bearbeitet 17.08.2026 21:16:49

OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected.

8

CVE-2019-3895

  • EPSS 1.43%
  • Veröffentlicht 03.06.2019 19:29:02
  • Zuletzt bearbeitet 21.11.2024 04:42:49

An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitrary image. This meant that a remote attacker could ...

7.5

CVE-2018-16856

  • EPSS 0.89%
  • Veröffentlicht 26.03.2019 18:29:00
  • Zuletzt bearbeitet 21.11.2024 03:53:27

In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and openstack-octavia-3.0.1-0.20181009115732 creates log files that are readable by all users. Sensitive information such as pr...