Lucene search
Veracode Vulnerability DatabaseVERACODE:35116HistoryApr 16, 2022 - 12:42 a.m.
Open Redirection
2022-04-1600:42:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
openstack-nova
open redirection
vulnerability
EPSS
0.926
Percentile
99.0%
openstack-nova is vulnerable to open redirection. The attack is possible because a victim could be made to redirect to any desired URL.
References
access.redhat.com/errata/RHSA-2022:0999
access.redhat.com/security/updates/classification/#moderate
bugs.launchpad.net/nova/+bug/1927677
bugs.python.org/issue32084
bugzilla.redhat.com/show_bug.cgi?id=1961439
opendev.org/openstack/nova/commit/04d48527b62a35d912f93bc75613a6cca606df66
opendev.org/openstack/nova/commit/8906552cfc2525a44251d4cf313ece61e57251eb
security.openstack.org/ossa/OSSA-2021-002.html
www.openwall.com/lists/oss-security/2021/07/29/2
Related
debiancve
debiancve
CVE-2021-3654
2022-03-02 23:15:08
cve
cve
CVE-2021-3654
2022-03-02 23:15:08
osv
osv
CVE-2021-3654
2022-03-02 23:15:08
Open Redirect in CPython that affects users of OpenStack Nova
2022-03-04 00:00:22
nova vulnerabilities
2023-02-13 10:41:19
nuclei
nuclei
Nova noVNC - Open Redirect
2021-09-28 01:53:50
redhat
redhat
nessus
nessus
RHEL 8 : Red Hat OpenStack Platform 16.2 (openstack-nova) (RHSA-2022:0999)
2022-03-24 00:00:00
RHEL 8 : Red Hat OpenStack Platform 16.1 (openstack-nova) (RHSA-2022:0983)
2022-03-25 00:00:00
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Nova vulnerabilities (USN-5866-1)
2023-02-13 00:00:00
ubuntucve
ubuntucve
CVE-2021-3654
2022-03-02 00:00:00
cvelist
cvelist
CVE-2021-3654
2022-03-02 00:00:00
redhatcve
redhatcve
CVE-2021-3654
2021-07-20 11:44:00
prion
prion
Design/Logic Flaw
2022-03-02 23:15:00
ibm
ibm
Security Bulletin: Openstack Compute (Nova) noVNC proxy
2021-10-26 20:39:48
github
github
Open Redirect in CPython that affects users of OpenStack Nova
2022-03-04 00:00:22
nvd
nvd
CVE-2021-3654
2022-03-02 23:15:08
ubuntu
ubuntu
Nova vulnerabilities
2023-02-13 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5866-1)
2023-02-14 00:00:00
gentoo
gentoo
Python, PyPy3: Multiple Vulnerabilities
2023-05-03 00:00:00