Most recent entries from all

bdu:2024-10195

BREW-openstackclient-CVE-2023-6110 — OpenStack improperly deletes access rules

Affected: Homebrew: openstackclient

A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.

EUVD-2026-206261

fkie_cve-2023-6110

A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.

GHSA-2ppf-2m6f-6v6f — OpenStack improperly deletes access rules

Affected: PyPI: python-openstackclient

A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.

gsd-2023-6110

PYSEC-2026-1853 — OpenStack improperly deletes access rules

Affected: PyPI: python-openstackclient

A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.

RHSA-2024:2737 — Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-openstackclient) security update

openstack: deleting a non existing access rule deletes another existing access rule in it's scope

UBUNTU-CVE-2023-6110

Affected: Ubuntu:16.04:LTS: python-openstackclient, Ubuntu:18.04:LTS: python-openstackclient, Ubuntu:20.04:LTS: python-openstackclient, Ubuntu:22.04:LTS: python-openstackclient

A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.

WID-SEC-W-2024-1228 — Red Hat OpenStack: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um Sicherheitsmaßnahmen zu umgehen, eine Denial-of-Service-Zustand zu erzeugen, um vertrauliche Informationen offenzulegen und Daten zu ändern.