https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:22:01 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-30045 cnvd-2017-30045 https://cve.radiocsirt.org/vuln/cnvd-2017-30045 https://cve.radiocsirt.org/vuln/euvd-2026-77123 EUVD-2026-77123 https://cve.radiocsirt.org/vuln/euvd-2026-77123 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12440 <p>Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenticated users with knowledge of trust IDs where Aodh is the trustee to obtain a Keystone token and perform unspecified authenticated actions by adding an alarm action with the scheme trust+http, and providing a trust id where Aodh is the trustee.</p> <p>Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenticated users with knowledge of trust IDs where Aodh is the trustee to obtain a Keystone token and perform unspecified authenticated actions by adding an alarm action with the scheme trust+http, and providing a trust id where Aodh is the trustee.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-12440 https://cve.radiocsirt.org/vuln/ghsa-86cv-9gpx-6hwj <p><strong>Affected:</strong> PyPI: aodh</p> <p>Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenticated users with knowledge of trust IDs where Aodh is the trustee to obtain a Keystone token and perform unspecified authenticated actions by adding an alarm action with the scheme trust+http, and providing a trust id where Aodh is the trustee.</p> <p><strong>Affected:</strong> PyPI: aodh</p> <p>Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenticated users with knowledge of trust IDs where Aodh is the trustee to obtain a Keystone token and perform unspecified authenticated actions by adding an alarm action with the scheme trust+http, and providing a trust id where Aodh is the trustee.</p> https://cve.radiocsirt.org/vuln/ghsa-86cv-9gpx-6hwj https://cve.radiocsirt.org/vuln/gsd-2017-12440 gsd-2017-12440 https://cve.radiocsirt.org/vuln/gsd-2017-12440 https://cve.radiocsirt.org/vuln/pysec-2026-619 <p><strong>Affected:</strong> PyPI: aodh</p> <p>Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenticated users with knowledge of trust IDs where Aodh is the trustee to obtain a Keystone token and perform unspecified authenticated actions by adding an alarm action with the scheme trust+http, and providing a trust id where Aodh is the trustee.</p> <p><strong>Affected:</strong> PyPI: aodh</p> <p>Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenticated users with knowledge of trust IDs where Aodh is the trustee to obtain a Keystone token and perform unspecified authenticated actions by adding an alarm action with the scheme trust+http, and providing a trust id where Aodh is the trustee.</p> https://cve.radiocsirt.org/vuln/pysec-2026-619 https://cve.radiocsirt.org/vuln/rhsa-2017:3227 <p>openstack-aodh: Aodh can be used to launder Keystone trusts</p> <p>openstack-aodh: Aodh can be used to launder Keystone trusts</p> https://cve.radiocsirt.org/vuln/rhsa-2017:3227 https://cve.radiocsirt.org/vuln/suse-su-2017:2627-1 <p>Security update for openstack-aodh</p> <p>Security update for openstack-aodh</p> https://cve.radiocsirt.org/vuln/suse-su-2017:2627-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-12440 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: aodh</p> <p>Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenticated users with knowledge of trust IDs where Aodh is the trustee to obtain a Keystone token and perform unspecified authenticated actions by adding an alarm action with the scheme trust+http, and providing a trust id where Aodh is the trustee.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: aodh</p> <p>Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenticated users with knowledge of trust IDs where Aodh is the trustee to obtain a Keystone token and perform unspecified authenticated actions by adding an alarm action with the scheme trust+http, and providing a trust id where Aodh is the trustee.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-12440