PT-2026-53519 · Pypi · Openstack Magnum

Publicado 2026-06-29 · Atualizado 2026-06-29

OSV

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

OpenStack Magnum passes OpenStack credentials into the Heat templates creating its instances. While these should just be used for retrieving the instances' SSL certificates, they allow full API access, though and can be used to perform any API operation the user is authorized to perform.

Correção

Identificadores relacionados

PYSEC-2026-437

Produtos afetados

Openstack Magnum

Referências · 10

• https://github.com/openstack/magnum · Nota
• https://github.com/openstack/magnum/commit/e93d82e8b3bc19211efd54edc17aebdca50670c1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-7404 · Nota de Segurança
• https://web.archive.org/web/20210124052053/https://securityfocus.com/bid/98467 · Nota
• https://pypi.org/project/openstack-magnum · Nota
• https://opendev.org/openstack/magnum/commit/0bb0d6486d6771ee21bbf897a091b1aa59e01b22 · Nota
• https://bugzilla.suse.com/show_bug.cgi?id=998182 · Nota
• https://bugs.launchpad.net/magnum/+bug/1620536 · Nota
• https://github.com/advisories/GHSA-793v-r35j-9rp9 · Nota
• https://osv.dev/vulnerability/PYSEC-2026-437 · Aviso do Fabricante