Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

cinder

9 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
9 · 3 medium
Registry
PyPI

Advisories 9

  • CVE-2024-32498Medium 6.5

    An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3.

    Affected: through 24.0.0.

  • CVE-2022-47951Medium 5.7

    An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and…

    Affected: fixed in 19.1.2; from 20.0.0, fixed in 20.0.2; fixed in 19.1.2; from 20.0.0, fixed in 20.0.2.

  • CVE-2020-10755Medium 6.5

    An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-cinder 15.x.x…

    Affected: from 14.0.0, fixed in 14.1.0; from 15.0.0, fixed in 15.2.0; from 16.0.0, fixed in 16.1.0; fixed in 14.1.0; from 15.0.0, fixed in 15.2.0; from 16.0.0, fixed in 16.1.0.

  • HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate…

    Affected: fixed in 7.0.0a0.

  • The image parser in OpenStack Cinder 7.0.2 and 8.0.0 through 8.1.1; Glance before 11.0.1 and 12.0.0; and Nova before 12.0.4 and 13.0.0…

    Affected: fixed in 7.0.2; from 8.0.0, fixed in 9.0.0; fixed in 7.0.2; from 8.0.0, fixed in 9.0.0.

  • OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote…

    Affected: fixed in 7.0.0a0.

  • The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data…

    Affected: fixed in 2014.1.3.

  • The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume_transfer.py) APIs in OpenStack Cinder Grizzly 2013.1.3 and…

    Affected: fixed in 7.0.0a0.

  • The clear_volume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when…

    Affected: fixed in 7.0.0a0.