Количество 4
Количество 4
CVE-2016-7404
OpenStack Magnum passes OpenStack credentials into the Heat templates creating its instances. While these should just be used for retrieving the instances' SSL certificates, they allow full API access, though and can be used to perform any API operation the user is authorized to perform.
CVE-2016-7404
OpenStack Magnum passes OpenStack credentials into the Heat templates creating its instances. While these should just be used for retrieving the instances' SSL certificates, they allow full API access, though and can be used to perform any API operation the user is authorized to perform.
CVE-2016-7404
OpenStack Magnum passes OpenStack credentials into the Heat templates ...
GHSA-793v-r35j-9rp9
Openstack Magnum Unsafe Credential Handling
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2016-7404 OpenStack Magnum passes OpenStack credentials into the Heat templates creating its instances. While these should just be used for retrieving the instances' SSL certificates, they allow full API access, though and can be used to perform any API operation the user is authorized to perform. | CVSS3: 9.8 | 3% Низкий | больше 6 лет назад | |
CVE-2016-7404 OpenStack Magnum passes OpenStack credentials into the Heat templates creating its instances. While these should just be used for retrieving the instances' SSL certificates, they allow full API access, though and can be used to perform any API operation the user is authorized to perform. | CVSS3: 9.8 | 3% Низкий | больше 6 лет назад | |
CVE-2016-7404 OpenStack Magnum passes OpenStack credentials into the Heat templates ... | CVSS3: 9.8 | 3% Низкий | больше 6 лет назад | |
GHSA-793v-r35j-9rp9 Openstack Magnum Unsafe Credential Handling | CVSS3: 9.8 | 3% Низкий | больше 3 лет назад |
Уязвимостей на страницу