Vulnerability Bulletins |
IBM Security Bulletin: Openstack Cinder and Horizon vulnerabilities affect IBM Cloud Manager with OpenStack (CVE-2015-1851 CVE-2015-3219) |
|
| Affected software | IBM |
|
IBM Cloud Manager with OpenStack is vulnerable to an OpenStack Cinder vulnerability that allows a local attacker to obtain sensitive information. IBM Cloud Manager with OpenStack is vulnerable to an OpenStack Horizon vulnerability that allows an attacker to steal cookie-based authentication credentials. CVE(s): CVE-2015-1851 and CVE-2015-3219 Affected product(s) and affected version(s): IBM Cloud Manager with OpenStack 4.1.0 through 4.1.0.4 IBM Cloud Manager with OpenStack 4.2.0 More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_openstack_cinder_and_horizon_vulnerabilities_affect_ibm_cloud_manager_with_openstack_cve_2015_1851_cve_2015_3219?lang=en_us |
|