Red Hat Red Hat OpenStack Platform 16.1
13 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-6110 | | Openstack: deleting a non existing access rule deletes another existing access rule in it's scope | MEDIUM 5.5 | 0.5 % | ||
| CVE-2024-8007 | | Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors | HIGH 8.1 | 0.4 % | ||
| CVE-2024-7319 | | Openstack-heat: incomplete fix for cve-2023-1625 | MEDIUM 5.0 | 0.4 % | ||
| CVE-2024-4438 | fixed in 0:3.3.23-16.el8ost | Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform | HIGH 7.5 | 0.8 % | ||
| CVE-2024-4437 | fixed in 0:3.3.23-16.el8ost | Etcd: incomplete fix for cve-2021-44716 in openstack platform | HIGH 7.5 | 0.8 % | ||
| CVE-2024-4436 | fixed in 0:3.3.23-16.el8ost | Etcd: incomplete fix for cve-2022-41723 in openstack platform | HIGH 7.5 | 0.8 % | ||
| CVE-2023-6725 | | Tripleo-ansible: bind keys are world readable | MEDIUM 5.5 | 0.2 % | ||
| CVE-2024-1141 | | Glance-store: glance store access key logged in debug log level | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-5366 | | Openvswitch don't match packets on nd_target field | HIGH 7.1 | 0.4 % | ||
| CVE-2023-1633 | | Insecure barbican configuration file leaking credential | MEDIUM 6.6 | 0.2 % | ||
| CVE-2023-1636 | | Incomplete container isolation | MEDIUM 6.0 | 0.5 % | ||
| CVE-2023-1625 | | Information leak in api | HIGH 7.4 | 0.7 % | ||
| CVE-2023-3637 | | Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277) | MEDIUM 6.5 | 1.3 % |