Search CVE reports

Toggle filters

1 – 3 of 3 results

CVE-2019-17134

Medium priority
Fixed

Amphora Images in OpenStack Octavia >=0.10.0 <2.1.2, >=3.0.0 <3.2.0, >=4.0.0 <4.1.0 allows anyone with access to the management network to bypass client-certificate based authentication and retrieve information or issue...

1 affected package

octavia

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
octavia — — — Not in release Not in release
Show less packages

CVE-2019-3895

Medium priority
Needs evaluation

An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitrary image. This meant that a...

1 affected package

octavia

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
octavia Needs evaluation Needs evaluation Needs evaluation Not in release Not in release
Show less packages

CVE-2018-16856

Medium priority
Needs evaluation

In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and openstack-octavia-3.0.1-0.20181009115732 creates log files that are readable by all users. Sensitive...

1 affected package

octavia

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
octavia Needs evaluation Needs evaluation Needs evaluation Not in release Not in release
Show less packages