DeutschShown in its original language — a full translation is planned for a future version.
Red Hat OpenStack: Mehrere Schwachstellen
view advisory published 2022-06-22
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und einen Denial-of-Service-Zustand zu verursachen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-23451US | high8.1OT elevated | — | ||
An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from a… | ||||
| CVE-2022-23452US | medium4.9OT elevated | — | ||
An authorization flaw was found in openstack-barbican, where anyone with an admin role could add secrets to a different project container. This flaw allows an attacker on the netwo… | ||||
| CVE-2022-28346US | critical9.8 | Exploit | ||
An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in… | ||||
| CVE-2022-0675US | critical9.8 | — | ||
In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unman… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory vom 2022-06-22external
- Red Hat Security Advisory vom 2022-06-22external
- Red Hat Security Advisory vom 2022-06-22external
- Red Hat Security Advisory RHSA-2022:5498 vom 2022-07-05external
- Red Hat Security Advisory RHSA-2022:5602 vom 2022-07-20external
- Red Hat Security Advisory RHSA-2022:8869 vom 2022-12-08external
- Red Hat Security Advisory RHSA-2022:8874 vom 2022-12-08external
- Debian Security Advisory DSA-5254 vom 2022-10-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan