CVE-2020-14355

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-11/msg00000.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2020-11/msg00001.html · Mailing List
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• lists.debian.org/debian-lts-announce/2020/11/msg00001.html · Mailing List
• lists.debian.org/debian-lts-announce/2020/11/msg00002.html · Mailing List
• usn.ubuntu.com/4572-1 · Third Party Advisory
• usn.ubuntu.com/4572-2 · Third Party Advisory
• debian.org/security/2020/dsa-4771 · Third Party Advisory
• openwall.com/lists/oss-security/2020/10/06/10 · Mailing List

openstack のその他の脆弱性

• CVE-2022-3146中 5.5A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently rest…
• CVE-2022-3101中 5.5A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently rest…
• CVE-2022-4134低 2.8A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integr…
• CVE-2022-3100中 5.9A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API.
• CVE-2022-1655中 6.5An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created…