Access Control

Every one of the 91 is a mark on the map. Named now: 1 to 26, most at risk first.

1. An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any authenticated user can create an EC2 credential for themselves for a project that they have a specifie…CVE-2020-12691Openstack · 4.9% likely

   CWE-863

2. OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing…CVE-2015-1856Openstack · 4.1% likely

   CWE-264

3. The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion reques…CVE-2012-4573Openstack · 3.4% likely

   CWE-264

4. The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain…CVE-2013-6433Openstack · 3.3% likely

   CWE-264

5. OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image policy is configured, does not properly r…CVE-2013-4428Openstack · 3.1% likely

   CWE-264

6. The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an…CVE-2014-0187Openstack · 3.0% likely

   CWE-264

7. The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion reques…CVE-2012-5482Openstack · 2.8% likely

   CWE-264

8. The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4 allows remote authenticated users to read or delete arbitrary files via a full pa…CVE-2014-9493Openstack · 2.8% likely

   CWE-264

9. The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with…CVE-2013-4294Openstack · 2.7% likely

   CWE-264

10. virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink atta…CVE-2012-3361Openstack · 2.7% likely

    CWE-264

11. The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volum…CVE-2013-0208Openstack · 2.5% likely

    CWE-264

12. The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Ent…CVE-2014-3632Openstack · 2.5% likely

    CWE-264

13. OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a reque…CVE-2012-3542Openstack · 2.5% likely

    CWE-264

14. OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allows remote authenticated users to bypass the storage quota and cause a denial of ser…CVE-2015-5286Openstack · 2.5% likely

    CWE-264

15. OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users…CVE-2014-3476Openstack · 2.3% likely

    CWE-269

16. OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expiration, which allows remote authenticate…CVE-2012-3426Openstack · 2.3% likely

    CWE-264

17. The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before icehouse-2 does not return a trust-scoped token when one is received, which allows re…CVE-2013-6391Openstack · 2.2% likely

    CWE-269

18. OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (crash or long firewall rule updat…CVE-2014-3555Openstack · 2.2% likely

    CWE-264

19. OpenStack Image Registry and Delivery Service (Glance) before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the image_…CVE-2014-5356Openstack · 2.1% likely

    CWE-264

20. python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remote authenticated users to (1) retain us…CVE-2013-2104Openstack · 2.1% likely

    CWE-264

21. OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to set admin network attributes to default values via unspecified vectors.CVE-2014-6414Openstack · 2.1% likely

    CWE-264

22. OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allow remote authenticated users to change the status of their images and bypass access…CVE-2015-5251Openstack · 2.1% likely

    CWE-264

23. A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators…CVE-2021-3563Openstack · 2.0% likely

    CWE-863

24. virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files via a symlink attac…CVE-2012-3447Openstack · 1.9% likely

    CWE-264

25. OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated trustees to gain access to an unauthorized project for wh…CVE-2014-3520Openstack · 1.9% likely

    CWE-863

26. OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked ro…CVE-2012-4413Openstack · 1.9% likely

    CWE-264

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.