Oval Definition:oval:org.opensuse.security:def:202010755
Revision Date:2022-05-22Version:1
Title:CVE-2020-10755
Description:

An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-cinder 15.x.x versions before openstack-cinder 15.2.0 and all openstack-cinder 16.x.x versions before openstack-cinder 16.1.0. When using openstack-cinder with the Dell EMC ScaleIO or VxFlex OS backend storage driver, credentials for the entire backend are exposed in the ``connection_info`` element in all Block Storage v3 Attachments API calls containing that element. This flaw enables an end-user to create a volume, make an API call to show the attachment detail information, and retrieve a username and password that may be used to connect to another user's volume. Additionally, these credentials are valid for the ScaleIO or VxFlex OS Management API, should an attacker discover the Management API endpoint. Source: OpenStack project
Family:unixClass:vulnerability
Status:Reference(s):CVE-2020-10755
unknown
Mitre CVE-2020-10755
SUSE CVE-2020-10755
Platform(s):SUSE OpenStack Cloud 8
SUSE OpenStack Cloud 9
SUSE OpenStack Cloud Crowbar 8
SUSE OpenStack Cloud Crowbar 9
Product(s):
Definition Synopsis
  • Release Information
  • SUSE OpenStack Cloud 8 is installed
  • OR SUSE OpenStack Cloud Crowbar 8 is installed
  • AND Package Information
  • openstack-cinder is affected
  • OR openstack-cinder-api is affected
  • OR openstack-cinder-backup is affected
  • OR openstack-cinder-scheduler is affected
  • OR openstack-cinder-volume is affected
  • OR python-cinder is affected
  • Definition Synopsis
  • Release Information
  • SUSE OpenStack Cloud 9 is installed
  • AND
  • ansible1-1.9.6-9.7.2 is installed
  • OR ardana-ansible-9.0+git.1591138508.e269bdb-3.22.2 is installed
  • OR ardana-cobbler-9.0+git.1588181228.bae3b1f-3.13.2 is installed
  • OR ardana-glance-9.0+git.1593631708.9354a78-3.13.2 is installed
  • OR ardana-input-model-9.0+git.1589740948.c24fc0b-3.19.2 is installed
  • OR ardana-logging-9.0+git.1591193994.d93b668-3.13.2 is installed
  • OR ardana-manila-9.0+git.1594158642.b5905e4-3.12.2 is installed
  • OR ardana-monasca-9.0+git.1589385256.7fbfaaf-3.19.2 is installed
  • OR ardana-mq-9.0+git.1593618110.cbd1a37-3.16.2 is installed
  • OR ardana-neutron-9.0+git.1590756257.e09d54f-3.22.2 is installed
  • OR ardana-octavia-9.0+git.1590079609.a2ae6ab-3.19.2 is installed
  • OR ardana-tempest-9.0+git.1593033709.9495bb2-3.16.2 is installed
  • OR grafana-6.2.5-3.12.2 is installed
  • OR kibana-4.6.3-4.3.2 is installed
  • OR openstack-barbican-7.0.1~dev24-3.9.5 is installed
  • OR openstack-barbican-api-7.0.1~dev24-3.9.5 is installed
  • OR openstack-barbican-keystone-listener-7.0.1~dev24-3.9.5 is installed
  • OR openstack-barbican-retry-7.0.1~dev24-3.9.5 is installed
  • OR openstack-barbican-worker-7.0.1~dev24-3.9.5 is installed
  • OR openstack-ceilometer-11.1.1~dev7-3.16.3 is installed
  • OR openstack-ceilometer-agent-central-11.1.1~dev7-3.16.3 is installed
  • OR openstack-ceilometer-agent-compute-11.1.1~dev7-3.16.3 is installed
  • OR openstack-ceilometer-agent-ipmi-11.1.1~dev7-3.16.3 is installed
  • OR openstack-ceilometer-agent-notification-11.1.1~dev7-3.16.3 is installed
  • OR openstack-ceilometer-polling-11.1.1~dev7-3.16.3 is installed
  • OR openstack-cinder-13.0.10~dev12-3.22.4 is installed
  • OR openstack-cinder-api-13.0.10~dev12-3.22.4 is installed
  • OR openstack-cinder-backup-13.0.10~dev12-3.22.4 is installed
  • OR openstack-cinder-scheduler-13.0.10~dev12-3.22.4 is installed
  • OR openstack-cinder-volume-13.0.10~dev12-3.22.4 is installed
  • OR openstack-dashboard-14.1.1~dev6-3.15.5 is installed
  • OR openstack-designate-7.0.2~dev2-3.19.3 is installed
  • OR openstack-designate-agent-7.0.2~dev2-3.19.3 is installed
  • OR openstack-designate-api-7.0.2~dev2-3.19.3 is installed
  • OR openstack-designate-central-7.0.2~dev2-3.19.3 is installed
  • OR openstack-designate-producer-7.0.2~dev2-3.19.3 is installed
  • OR openstack-designate-sink-7.0.2~dev2-3.19.3 is installed
  • OR openstack-designate-worker-7.0.2~dev2-3.19.3 is installed
  • OR openstack-heat-templates-0.0.0+git.1582270132.8a20477-3.6.2 is installed
  • OR openstack-ironic-11.1.5~dev6-3.19.3 is installed
  • OR openstack-ironic-api-11.1.5~dev6-3.19.3 is installed
  • OR openstack-ironic-conductor-11.1.5~dev6-3.19.3 is installed
  • OR openstack-keystone-14.2.1~dev4-3.22.3 is installed
  • OR openstack-magnum-7.2.1~dev1-3.13.3 is installed
  • OR openstack-magnum-api-7.2.1~dev1-3.13.3 is installed
  • OR openstack-magnum-conductor-7.2.1~dev1-3.13.3 is installed
  • OR openstack-manila-7.4.2~dev31-4.24.3 is installed
  • OR openstack-manila-api-7.4.2~dev31-4.24.3 is installed
  • OR openstack-manila-data-7.4.2~dev31-4.24.3 is installed
  • OR openstack-manila-scheduler-7.4.2~dev31-4.24.3 is installed
  • OR openstack-manila-share-7.4.2~dev31-4.24.3 is installed
  • OR openstack-monasca-agent-2.8.2~dev5-3.9.3 is installed
  • OR openstack-neutron-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-dhcp-agent-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-ha-tool-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-l3-agent-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-linuxbridge-agent-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-macvtap-agent-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-metadata-agent-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-metering-agent-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-openvswitch-agent-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-server-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-vsphere-2.0.1~dev167-3.3.3 is installed
  • OR openstack-neutron-vsphere-doc-2.0.1~dev167-3.3.3 is installed
  • OR openstack-neutron-vsphere-dvs-agent-2.0.1~dev167-3.3.3 is installed
  • OR openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev167-3.3.3 is installed
  • OR openstack-nova-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-api-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-cells-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-compute-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-conductor-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-console-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-novncproxy-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-placement-api-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-scheduler-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-serialproxy-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-vncproxy-18.3.1~dev38-3.25.4 is installed
  • OR openstack-octavia-3.2.3~dev7-3.25.3 is installed
  • OR openstack-octavia-amphora-agent-3.2.3~dev7-3.25.3 is installed
  • OR openstack-octavia-amphora-image-x86_64-0.1.4-7.12.3 is installed
  • OR openstack-octavia-api-3.2.3~dev7-3.25.3 is installed
  • OR openstack-octavia-health-manager-3.2.3~dev7-3.25.3 is installed
  • OR openstack-octavia-housekeeping-3.2.3~dev7-3.25.3 is installed
  • OR openstack-octavia-worker-3.2.3~dev7-3.25.3 is installed
  • OR openstack-resource-agents-1.0+git.1569436425.8b9c49f-5.3.2 is installed
  • OR python-Django1-1.11.29-3.15.2 is installed
  • OR python-Pillow-5.2.0-3.3.2 is installed
  • OR python-ardana-packager-0.0.3-9.3.2 is installed
  • OR python-barbican-7.0.1~dev24-3.9.5 is installed
  • OR python-ceilometer-11.1.1~dev7-3.16.3 is installed
  • OR python-cinder-13.0.10~dev12-3.22.4 is installed
  • OR python-designate-7.0.2~dev2-3.19.3 is installed
  • OR python-heatclient-1.16.3-3.3.3 is installed
  • OR python-heatclient-doc-1.16.3-3.3.3 is installed
  • OR python-horizon-14.1.1~dev6-3.15.5 is installed
  • OR python-ironic-11.1.5~dev6-3.19.3 is installed
  • OR python-keystone-14.2.1~dev4-3.22.3 is installed
  • OR python-magnum-7.2.1~dev1-3.13.3 is installed
  • OR python-manila-7.4.2~dev31-4.24.3 is installed
  • OR python-monasca-agent-2.8.2~dev5-3.9.3 is installed
  • OR python-networking-vsphere-2.0.1~dev167-3.3.3 is installed
  • OR python-neutron-13.0.8~dev68-3.25.3 is installed
  • OR python-neutron-tempest-plugin-0.2.0-3.3.2 is installed
  • OR python-nova-18.3.1~dev38-3.25.4 is installed
  • OR python-octavia-3.2.3~dev7-3.25.3 is installed
  • OR python-octavia-tempest-plugin-0.2.0-3.3.2 is installed
  • OR python-openstack_auth-14.1.1~dev6-3.15.5 is installed
  • OR python-os-brick-2.5.10-3.12.3 is installed
  • OR python-os-brick-common-2.5.10-3.12.3 is installed
  • OR python-oslo.messaging-8.1.4-3.6.2 is installed
  • OR python-pyroute2-0.5.2-4.3.2 is installed
  • OR python-urllib3-1.23-3.12.2 is installed
  • OR python-waitress-1.4.3-3.3.1 is installed
  • OR release-notes-suse-openstack-cloud-9.20200610-3.21.4 is installed
  • OR venv-openstack-barbican-x86_64-7.0.1~dev24-3.19.3 is installed
  • OR venv-openstack-cinder-x86_64-13.0.10~dev12-3.19.2 is installed
  • OR venv-openstack-designate-x86_64-7.0.2~dev2-3.19.2 is installed
  • OR venv-openstack-glance-x86_64-17.0.1~dev30-3.17.2 is installed
  • OR venv-openstack-heat-x86_64-11.0.3~dev35-3.19.2 is installed
  • OR venv-openstack-horizon-x86_64-14.1.1~dev6-4.18.3 is installed
  • OR venv-openstack-ironic-x86_64-11.1.5~dev6-4.15.2 is installed
  • OR venv-openstack-keystone-x86_64-14.2.1~dev4-3.19.2 is installed
  • OR venv-openstack-magnum-x86_64-7.2.1~dev1-4.19.2 is installed
  • OR venv-openstack-manila-x86_64-7.4.2~dev31-3.21.2 is installed
  • OR venv-openstack-monasca-ceilometer-x86_64-1.8.2~dev3-3.19.2 is installed
  • OR venv-openstack-monasca-x86_64-2.7.1~dev10-3.17.3 is installed
  • OR venv-openstack-neutron-x86_64-13.0.8~dev68-6.19.2 is installed
  • OR venv-openstack-nova-x86_64-18.3.1~dev38-3.19.3 is installed
  • OR venv-openstack-octavia-x86_64-3.2.3~dev7-4.19.2 is installed
  • OR venv-openstack-sahara-x86_64-9.0.2~dev15-3.19.2 is installed
  • OR venv-openstack-swift-x86_64-2.19.2~dev48-2.14.2 is installed
  • OR Package Information
  • SUSE OpenStack Cloud Crowbar 9 is installed
  • AND
  • crowbar-core-6.0+git.1594619891.b75a61d0d-3.25.5 is installed
  • OR crowbar-core-branding-upstream-6.0+git.1594619891.b75a61d0d-3.25.5 is installed
  • OR crowbar-openstack-6.0+git.1591795073.49cb6400e-3.25.3 is installed
  • OR grafana-6.2.5-3.12.2 is installed
  • OR kibana-4.6.3-4.3.2 is installed
  • OR openstack-barbican-7.0.1~dev24-3.9.5 is installed
  • OR openstack-barbican-api-7.0.1~dev24-3.9.5 is installed
  • OR openstack-barbican-keystone-listener-7.0.1~dev24-3.9.5 is installed
  • OR openstack-barbican-retry-7.0.1~dev24-3.9.5 is installed
  • OR openstack-barbican-worker-7.0.1~dev24-3.9.5 is installed
  • OR openstack-ceilometer-11.1.1~dev7-3.16.3 is installed
  • OR openstack-ceilometer-agent-central-11.1.1~dev7-3.16.3 is installed
  • OR openstack-ceilometer-agent-compute-11.1.1~dev7-3.16.3 is installed
  • OR openstack-ceilometer-agent-ipmi-11.1.1~dev7-3.16.3 is installed
  • OR openstack-ceilometer-agent-notification-11.1.1~dev7-3.16.3 is installed
  • OR openstack-ceilometer-polling-11.1.1~dev7-3.16.3 is installed
  • OR openstack-cinder-13.0.10~dev12-3.22.4 is installed
  • OR openstack-cinder-api-13.0.10~dev12-3.22.4 is installed
  • OR openstack-cinder-backup-13.0.10~dev12-3.22.4 is installed
  • OR openstack-cinder-scheduler-13.0.10~dev12-3.22.4 is installed
  • OR openstack-cinder-volume-13.0.10~dev12-3.22.4 is installed
  • OR openstack-dashboard-14.1.1~dev6-3.15.5 is installed
  • OR openstack-designate-7.0.2~dev2-3.19.3 is installed
  • OR openstack-designate-agent-7.0.2~dev2-3.19.3 is installed
  • OR openstack-designate-api-7.0.2~dev2-3.19.3 is installed
  • OR openstack-designate-central-7.0.2~dev2-3.19.3 is installed
  • OR openstack-designate-producer-7.0.2~dev2-3.19.3 is installed
  • OR openstack-designate-sink-7.0.2~dev2-3.19.3 is installed
  • OR openstack-designate-worker-7.0.2~dev2-3.19.3 is installed
  • OR openstack-heat-templates-0.0.0+git.1582270132.8a20477-3.6.2 is installed
  • OR openstack-ironic-11.1.5~dev6-3.19.3 is installed
  • OR openstack-ironic-api-11.1.5~dev6-3.19.3 is installed
  • OR openstack-ironic-conductor-11.1.5~dev6-3.19.3 is installed
  • OR openstack-keystone-14.2.1~dev4-3.22.3 is installed
  • OR openstack-magnum-7.2.1~dev1-3.13.3 is installed
  • OR openstack-magnum-api-7.2.1~dev1-3.13.3 is installed
  • OR openstack-magnum-conductor-7.2.1~dev1-3.13.3 is installed
  • OR openstack-manila-7.4.2~dev31-4.24.3 is installed
  • OR openstack-manila-api-7.4.2~dev31-4.24.3 is installed
  • OR openstack-manila-data-7.4.2~dev31-4.24.3 is installed
  • OR openstack-manila-scheduler-7.4.2~dev31-4.24.3 is installed
  • OR openstack-manila-share-7.4.2~dev31-4.24.3 is installed
  • OR openstack-monasca-agent-2.8.2~dev5-3.9.3 is installed
  • OR openstack-neutron-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-dhcp-agent-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-ha-tool-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-l3-agent-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-linuxbridge-agent-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-macvtap-agent-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-metadata-agent-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-metering-agent-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-openvswitch-agent-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-server-13.0.8~dev68-3.25.3 is installed
  • OR openstack-neutron-vsphere-2.0.1~dev167-3.3.3 is installed
  • OR openstack-neutron-vsphere-doc-2.0.1~dev167-3.3.3 is installed
  • OR openstack-neutron-vsphere-dvs-agent-2.0.1~dev167-3.3.3 is installed
  • OR openstack-neutron-vsphere-ovsvapp-agent-2.0.1~dev167-3.3.3 is installed
  • OR openstack-nova-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-api-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-cells-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-compute-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-conductor-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-console-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-novncproxy-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-placement-api-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-scheduler-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-serialproxy-18.3.1~dev38-3.25.4 is installed
  • OR openstack-nova-vncproxy-18.3.1~dev38-3.25.4 is installed
  • OR openstack-octavia-3.2.3~dev7-3.25.3 is installed
  • OR openstack-octavia-amphora-agent-3.2.3~dev7-3.25.3 is installed
  • OR openstack-octavia-amphora-image-x86_64-0.1.4-7.12.3 is installed
  • OR openstack-octavia-api-3.2.3~dev7-3.25.3 is installed
  • OR openstack-octavia-health-manager-3.2.3~dev7-3.25.3 is installed
  • OR openstack-octavia-housekeeping-3.2.3~dev7-3.25.3 is installed
  • OR openstack-octavia-worker-3.2.3~dev7-3.25.3 is installed
  • OR openstack-resource-agents-1.0+git.1569436425.8b9c49f-5.3.2 is installed
  • OR python-Django1-1.11.29-3.15.2 is installed
  • OR python-Pillow-5.2.0-3.3.2 is installed
  • OR python-barbican-7.0.1~dev24-3.9.5 is installed
  • OR python-ceilometer-11.1.1~dev7-3.16.3 is installed
  • OR python-cinder-13.0.10~dev12-3.22.4 is installed
  • OR python-designate-7.0.2~dev2-3.19.3 is installed
  • OR python-heatclient-1.16.3-3.3.3 is installed
  • OR python-heatclient-doc-1.16.3-3.3.3 is installed
  • OR python-horizon-14.1.1~dev6-3.15.5 is installed
  • OR python-ironic-11.1.5~dev6-3.19.3 is installed
  • OR python-keystone-14.2.1~dev4-3.22.3 is installed
  • OR python-magnum-7.2.1~dev1-3.13.3 is installed
  • OR python-manila-7.4.2~dev31-4.24.3 is installed
  • OR python-monasca-agent-2.8.2~dev5-3.9.3 is installed
  • OR python-networking-vsphere-2.0.1~dev167-3.3.3 is installed
  • OR python-neutron-13.0.8~dev68-3.25.3 is installed
  • OR python-neutron-tempest-plugin-0.2.0-3.3.2 is installed
  • OR python-nova-18.3.1~dev38-3.25.4 is installed
  • OR python-octavia-3.2.3~dev7-3.25.3 is installed
  • OR python-octavia-tempest-plugin-0.2.0-3.3.2 is installed
  • OR python-openstack_auth-14.1.1~dev6-3.15.5 is installed
  • OR python-os-brick-2.5.10-3.12.3 is installed
  • OR python-os-brick-common-2.5.10-3.12.3 is installed
  • OR python-oslo.messaging-8.1.4-3.6.2 is installed
  • OR python-pyroute2-0.5.2-4.3.2 is installed
  • OR python-urllib3-1.23-3.12.2 is installed
  • OR python-waitress-1.4.3-3.3.1 is installed
  • OR release-notes-suse-openstack-cloud-9.20200610-3.21.4 is installed
  • OR ruby2.1-rubygem-activeresource-4.0.0-4.3.1 is installed
  • OR ruby2.1-rubygem-json-1_7-1.7.7-4.3.1 is installed
  • OR ruby2.1-rubygem-puma-2.16.0-4.9.1 is installed
  • BACK