RCE in Openstack Folsom
CVE-2013-2161
XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.019 (77.3th percentile) — read the EPSS interpretation.
Affected products
- Openstack Folsom
- Openstack Grizzly
- Openstack Havana
- Opensuse — versions 12.3
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (vendor-advisory, x_refsource_DEBIAN)
- secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (mailing-list, x_refsource_MLIST)