Openstack Уязвимости

Временная шкала

Тип

Продукт

OpenStack Compute26
OpenStack Keystone23
OpenStack Horizon13
OpenStack Neutron13
OpenStack Swift9

Устранение последствий

Official Fix132
Temporary Fix0
Workaround0
Unavailable0
Not Defined55

Эксплуатационная пригодность

High0
Functional0
Proof-of-Concept1
Unproven3
Not Defined183

Вектор доступа

Not Defined0
Physical0
Local21
Adjacent15
Network151

Аутентификация

Not Defined0
High0
Low104
None83

Взаимодействие с пользователем

Not Defined0
Required17
None170

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤424
≤554
≤647
≤734
≤819
≤97
≤101

CVSSv3 Temp

≤10
≤20
≤33
≤423
≤553
≤662
≤724
≤818
≤93
≤101

VulDB

≤10
≤20
≤32
≤428
≤551
≤648
≤732
≤822
≤93
≤101

NVD

≤10
≤20
≤30
≤42
≤55
≤69
≤76
≤88
≤93
≤108

CNA

≤10
≤20
≤30
≤40
≤51
≤62
≤70
≤80
≤91
≤100

Поставщик

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Эксплойт 0-дня

<1k53
<2k61
<5k73
<10k0
<25k0
<50k0
<100k0
≥100k0

Эксплойт сегодня

<1k183
<2k3
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

Объем рынка эксплойтов

🔴 CTI Деятельность

Affected Products (57): Barbican (2), Ceilometer (1), Cinder (3), Compute (26), Compute (Nova) (1), Dashboard (3), Delivery Service (1), Designate (1), Diablo (1), Essex (1), Folsom (8), Glance (5), Grizzly (8), Havana (5), Heat (4), Horizon (13), Identity (2), Image Registry (1), Image Registry And Delivery Service (7), Image Registry And Delivery Service (glance) (1), Image Service (3), Ironic (2), Ironic Inspector (1), Keystone (23), Keystone Folsom (1), Manila (2), Murano (2), Neutron (13), Newton (1), Nova (6), Nova-LXD (1), Object Storage (3), Ocata (1), OpenStack Keystone (1), Orchestration (1), Puppet Module for Gerrit (1), PyCADF (1), Storlets yoga-eom (1), Sushy-Tools (1), Swauth (1), Swift (9), Swift-on-File (1), Trove (2), Undercloud (1), VirtualBMC (1), Workflow (1), blazar-dashboard (1), devstack (1), horizon (2), icehouse (1), keystonemiddleware (2), magnum yoga-eom (1), neutron (1), os-vif (1), python-keystoneclient (3), rabbitmq (1), swift (1)

Link to Vendor Website: https://www.openstack.org/

ОпубликованоBaseTempУязвимостиProdЭ�RemEPSSCTICVE
22.04.20246.36.3OpenStack Storlets yoga-eom gateway.py повреждение памятиCloud SoftwareNot DefinedNot Defined0.000430.05CVE-2024-28717
12.04.20246.36.3OpenStack magnum yoga-eom cert_manager.py повреждение памятиCloud SoftwareNot DefinedNot Defined0.000450.04CVE-2024-28718
18.03.20242.62.5OpenStack Murano YAQL раскрытие информацииCloud SoftwareNot DefinedOfficial Fix0.000450.04CVE-2024-29156
21.09.20237.17.1OpenStack Undercloud раскрытие информацииCloud SoftwareNot DefinedNot Defined0.002360.00CVE-2022-3596
23.08.20234.54.5OpenStack Horizon Web Dashboard RedirectCloud SoftwareNot DefinedOfficial Fix0.000520.06CVE-2022-45582
22.04.20233.53.5OpenStack Barbican Configuration File раскрытие информацииCloud SoftwareNot DefinedNot Defined0.000420.02CVE-2023-1633
22.04.20235.55.5OpenStack Barbican Container Isolation эскалация привилегийCloud SoftwareNot DefinedNot Defined0.000450.06CVE-2023-1636
18.01.20235.45.3OpenStack Swift XML File раскрытие информацииCloud SoftwareNot DefinedOfficial Fix0.000800.02CVE-2022-47950
31.10.20225.05.0OpenStack Sushy-Tools/VirtualBMC Boot Configuration эскалация привилегийCloud SoftwareNot DefinedNot Defined0.000480.00CVE-2022-44020
26.08.20227.37.3OpenStack Keystone Application Secret повреждение памятиCloud SoftwareNot DefinedNot Defined0.004450.00CVE-2021-3563
03.08.20223.43.4OpenStack Nova Neutron Port отказ в обслуживанииCloud SoftwareNot DefinedOfficial Fix0.000470.00CVE-2022-37394
03.03.20224.94.7OpenStack Nova noVNC RedirectCloud SoftwareNot DefinedOfficial Fix0.925960.04CVE-2021-3654
09.09.20214.34.1OpenStack Neutron API Worker отказ в обслуживанииCloud SoftwareNot DefinedOfficial Fix0.001180.00CVE-2021-40797
01.09.20215.55.3OpenStack Neutron dnsmasq Privilege EscalationCloud SoftwareNot DefinedOfficial Fix0.001120.00CVE-2021-40085
23.08.20216.36.0OpenStack Neutron Linuxbridge Driver эскалация привилегийCloud SoftwareNot DefinedOfficial Fix0.000840.00CVE-2021-38598
07.08.20213.13.0OpenStack Keystone Account Lockout раскрытие информацииCloud SoftwareNot DefinedOfficial Fix0.001710.03CVE-2021-38155
02.06.20213.53.5OpenStack Swift Proxy-Server Log раскрытие информацииCloud SoftwareNot DefinedNot Defined0.000540.00CVE-2017-8761
16.10.20207.77.4OpenStack blazar-dashboard эскалация привилегийCloud SoftwareNot DefinedOfficial Fix0.002330.03CVE-2020-26943
07.05.20207.57.2OpenStack OpenStack Keystone EC2 Credential Masquerade слабое шифрованиеCloud SoftwareNot DefinedOfficial Fix0.007650.00CVE-2020-12691
12.03.20208.27.8OpenStack Manila эскалация привилегийCloud SoftwareNot DefinedOfficial Fix0.001670.04CVE-2020-9543
22.11.20196.46.4OpenStack Designate DNS Protocol отказ в обслуживанииCloud SoftwareNot DefinedNot Defined0.005270.02CVE-2015-5694
28.08.20198.27.8OpenStack os-vif linuxbridge impl_pyroute2.py PyRoute2.add отказ в обслуживанииCloud SoftwareNot DefinedOfficial Fix0.002670.00CVE-2019-15753
10.09.20187.37.3OpenStack rabbitmq эскалация привилегийCloud SoftwareNot DefinedNot Defined0.003170.03CVE-2018-14620
27.07.20184.94.9OpenStack Workflow Service Log Directory раскрытие информацииCloud SoftwareNot DefinedNot Defined0.000440.00CVE-2017-2622
27.07.20184.94.9OpenStack Orchestration Access раскрытие информацииCloud SoftwareNot DefinedOfficial Fix0.000570.03CVE-2017-2621

162 больше записей не показано

Do you need the next level of professionalism?

Upgrade your account now!