The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade openstack-nova-volumeUpgrade openstack-nova-novncproxyUpgrade python-greenlet-develUpgrade python-greenletUpgrade openstack-nova-testUpgrade openstack-nova-objectstoreUpgrade openstack-nova-docUpgrade python-novaUpgrade openstack-novaUpgrade openstack-nova-certUpgrade openstack-nova-computeUpgrade openstack-nova-networkUpgrade openstack-nova-vncproxyUpgrade openstack-nova-apiUpgrade openstack-nova-scheduler | Dec 12, 2013 | Dec 10, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub