SUSE SUSE OpenStack Cloud 8
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-8023 | | Local privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap2 | HIGH 7.8 | 0.4 % | ||
| CVE-2020-8022 | | User-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviliges | HIGH 7.8 | 0.9 % | ||
| CVE-2018-17954 | ardana-cinder – < 8.0+git.1579279939.ee7da88-3.39.3, ardana- | crowbar provision leaks admin password to all nodes in cleartext | CRITICAL 9.3 | 0.3 % | ||
| CVE-2019-3683 | keystone-json-assignment – < d7888c75505465490250c00cc0ef4bb1af662f9f | keystone_json_assignment backend granted access to any project for users in user-project-map.json | HIGH 8.8 | 0.9 % |