Vulnerabilities > Redhat > Openstack Platform

DATE CVE VULNERABILITY TITLE RISK
2024-08-21 CVE-2024-8007 Improper Certificate Validation vulnerability in Redhat Openstack Platform 16.1/16.2/17.1
A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director.
network
high complexity
redhat CWE-295
8.1
2024-08-02 CVE-2024-7319 An incomplete fix for CVE-2023-1625 was found in openstack-heat.
network
low complexity
openstack redhat
5.0
2023-12-18 CVE-2023-48795 Improper Validation of Integrity Check Value vulnerability in multiple products
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack.
5.9
2023-11-01 CVE-2023-5625 Unspecified vulnerability in Redhat products
A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.
network
low complexity
redhat
7.5
2023-10-10 CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. 7.5
2023-09-24 CVE-2023-1625 An information leak was discovered in OpenStack heat.
network
low complexity
openstack redhat
5.0
2023-09-24 CVE-2023-1633 Insufficiently Protected Credentials vulnerability in multiple products
A credentials leak flaw was found in OpenStack Barbican.
local
low complexity
openstack redhat CWE-522
5.5
2023-09-24 CVE-2023-1636 A vulnerability was found in OpenStack Barbican containers.
network
low complexity
openstack redhat
5.0
2023-09-20 CVE-2022-3596 Unspecified vulnerability in Redhat Openstack Platform 13.0
An information leak was found in OpenStack's undercloud.
network
low complexity
redhat
7.5
2023-09-15 CVE-2022-3261 Cleartext Transmission of Sensitive Information vulnerability in Redhat Openstack Platform 16.2
A flaw was found in OpenStack.
network
low complexity
redhat CWE-319
7.5