Vulnerabilities (CVE)

Filtered by vendor Redhat Subscribe
Filtered by product Openstack-mistral
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-3866 1 Redhat 2 Openstack, Openstack-mistral 2021-08-04 2.1 LOW 5.5 MEDIUM
An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world readable. A malicious system user could exploit this flaw to access sensitive user information.
CVE-2018-16848 1 Redhat 1 Openstack-mistral 2020-06-17 4.0 MEDIUM 6.5 MEDIUM
A Denial of Service (DoS) condition is possible in OpenStack Mistral in versions up to and including 7.0.3. Submitting a specially crafted workflow definition YAML file containing nested anchors can lead to resource exhaustion culminating in a denial of service.