FO
Product
Folsom
25
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 2Low 0
Watch
Add Folsom to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-0261 | 8.8 | Mar 8 | A flaw was found in PackStack Affected: All versions, or not specified |
| CVE-2013-0335 | 7.6 | Mar 22 | OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC… Affected: 2012.2 |
| CVE-2013-0266 | 5.5 | Mar 8 | A flaw was found in the `puppetlabs-cinder` module, as used in PackStack Affected: All versions, or not specified |
| CVE-2012-5571 | 5.4 | Dec 18 | A flaw was found in OpenStack Keystone Affected: 2012.2 |
| CVE-2013-4463 | – | Feb 6 | OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file… Affected: All versions, or not specified |
| CVE-2013-2030 | – | Dec 27 | keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to… Affected: All versions, or not specified |
| CVE-2013-4497 | – | Nov 5 | The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live… Affected: All versions, or not specified |
| CVE-2013-4469 | – | Nov 2 | OpenStack Compute (Nova) Folsom, Grizzly, and Havana, when use_cow_images is set to False, does not verify the virtual size of a QCOW2 image, which allows local users to cause a… Affected: All versions, or not specified |
| CVE-2013-4261 | – | Oct 29 | OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote… Affected: through - |
| CVE-2013-4155 | – | Aug 20 | OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service ("superfluous" tombstone consumption and Swift cluster… Affected: All versions, or not specified |
| CVE-2013-2161 | – | Aug 20 | XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name Affected: All versions, or not specified |
| CVE-2013-2096 | – | Jul 9 | OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system… Affected: All versions, or not specified |
| CVE-2013-1665 | – | Apr 3 | The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read… Affected: All versions, or not specified |
| CVE-2013-1664 | – | Apr 3 | The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django;… Affected: All versions, or not specified |
| CVE-2013-1865 | – | Mar 22 | OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended… Affected: 2012.2 |
| CVE-2013-1838 | – | Mar 22 | OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial… Affected: 2012.2 |
| CVE-2013-0208 | – | Feb 13 | The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a… Affected: All versions, or not specified |
| CVE-2012-5625 | – | Dec 26 | OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating… Affected: 2012.2 |
| CVE-2012-5563 | – | Dec 18 | OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization… Affected: 2012.2 |
| CVE-2012-5482 | – | Nov 11 | The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion… Affected: 2012.2 |
| CVE-2012-4573 | – | Nov 11 | The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion… Affected: 2012.2 |
| CVE-2012-3447 | – | Aug 20 | virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files via a symlink… Affected: All versions, or not specified |
| CVE-2012-3361 | – | Jul 22 | virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink… Affected: 2012.2 |
| CVE-2012-3360 | – | Jul 22 | Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors, allows remote… Affected: 2012.2 |
| CVE-2012-3371 | – | Jul 17 | The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to… Affected: 2012.2 |
Showing 25