https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:50:00.770616+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-30045 cnvd-2017-30045 2026-10-03T10:50:00.903167+00:00 cnvd-2017-30045 https://cve.radiocsirt.org/vuln/euvd-2026-77123 EUVD-2026-77123 2026-10-03T10:50:00.903226+00:00 EUVD-2026-77123 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12440 fkie_cve-2017-12440 2026-10-03T10:50:00.903253+00:00

Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenticated users with knowledge of trust IDs where Aodh is the trustee to obtain a Keystone token and perform unspecified authenticated actions by adding an alarm action with the scheme trust+http, and providing a trust id where Aodh is the trustee.

 https://cve.radiocsirt.org/vuln/ghsa-86cv-9gpx-6hwj GHSA-86cv-9gpx-6hwj — Openstack Aodh can be used to launder Keystone trusts 2026-10-03T10:50:00.903288+00:00

Affected: PyPI: aodh

Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenticated users with knowledge of trust IDs where Aodh is the trustee to obtain a Keystone token and perform unspecified authenticated actions by adding an alarm action with the scheme trust+http, and providing a trust id where Aodh is the trustee.

 https://cve.radiocsirt.org/vuln/gsd-2017-12440 gsd-2017-12440 2026-10-03T10:50:00.903315+00:00 gsd-2017-12440 https://cve.radiocsirt.org/vuln/pysec-2026-619 PYSEC-2026-619 — Openstack Aodh can be used to launder Keystone trusts 2026-10-03T10:50:00.903328+00:00

Affected: PyPI: aodh

Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenticated users with knowledge of trust IDs where Aodh is the trustee to obtain a Keystone token and perform unspecified authenticated actions by adding an alarm action with the scheme trust+http, and providing a trust id where Aodh is the trustee.

 https://cve.radiocsirt.org/vuln/rhsa-2017:3227 RHSA-2017:3227 — Red Hat Security Advisory: openstack-aodh security update 2026-10-03T10:50:00.903349+00:00

openstack-aodh: Aodh can be used to launder Keystone trusts

 https://cve.radiocsirt.org/vuln/suse-su-2017:2627-1 SUSE-SU-2017:2627-1 — Security update for openstack-aodh 2026-10-03T10:50:00.903366+00:00

Security update for openstack-aodh

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-12440 UBUNTU-CVE-2017-12440 2026-10-03T10:50:00.903382+00:00

Affected: Ubuntu:16.04:LTS: aodh

Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenticated users with knowledge of trust IDs where Aodh is the trustee to obtain a Keystone token and perform unspecified authenticated actions by adding an alarm action with the scheme trust+http, and providing a trust id where Aodh is the trustee.