Advisories · Technology

openstack.

Every CVE that names openstack among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-3261 CVE record

CVSS 4.4 Medium

Plain-text passwords saved in /var/log/messages
- openstack
- Red Hat OpenStack Platform 16.2
- CWE-256
Not analysed yet 15 Sept 2023
CVE-2023-2088 CVE record

CVSS 6.5 Medium

A flaw was found in OpenStack due to an inconsistency between Cinder and Nova.
- OpenStack
- CWE-440
Not analysed yet 12 May 2023
CVE-2022-38065 CVE record

CVSS 8.8 High

Improper privilege management in OpenStack
- OpenStack
- Privilege escalation
Not analysed yet 21 Dec 2022
CVE-2022-1655 CVE record

Incorrect permission assignment in OpenStack
- OpenStack
- Broken access control
Not analysed yet 22 Jul 2022