Bugs : OpenStack Security Advisory

High

In Progress

#2138575 DOM-based XSS in OpenStack Skyline Console via unsanitized instance console log rendering

OpenStack Security Advisory 262

High

In Progress

#2141713 user_enabled_attribute ldap flag is not implemented

OpenStack Security Advisory 10

Undecided

Incomplete

#1986969 Manually assign --device and --device-owner to a port does NOT binds the port inmediatly

OpenStack Security Advisory 264

Undecided

Incomplete

#2020113 User with Reader role can create/delete/update/set-bootable volume

OpenStack Security Advisory 278

Undecided

Incomplete

#2048103 No limit in length of "image description " parameter results in DOS attack

OpenStack Security Advisory 262

Undecided

Incomplete

#2048493 Horizon exposes secrets via volume transfer URL

OpenStack Security Advisory 260

Undecided

New

#2049762 Service tokens seems to be incorrectly implemented in kolla-ansible

OpenStack Security Advisory 276

Undecided

Incomplete

#2058138 [SRU] Neutron OVSHybridIptablesFirewallDriver and IptablesFirewallDriver don't enforce Remote address groups

OpenStack Security Advisory 266

Undecided

Incomplete

#2071451 [ml2][ovs][firewall] port changes ofport and local_vlan will lead to wrong flow installation

OpenStack Security Advisory 258

Undecided

Incomplete

#2089545 neutron-dynamic-routing: Agent not properly validating address family it seems

OpenStack Security Advisory 270

Undecided

Incomplete

#2098109 Regular user can modify router SNAT flag

OpenStack Security Advisory 264

Undecided

Incomplete

#2121233 User token is logged and printed back on error

OpenStack Security Advisory 262

Undecided

Incomplete

#2130049 Context reused across requests

OpenStack Security Advisory 260

Undecided

Incomplete

#2130972 Show response body on GET enforcement request

OpenStack Security Advisory 258

Undecided

Incomplete

#2141589 [OVN] security group rules created prior to address_set support might be vulnerable

OpenStack Security Advisory 260