Aller au contenu
en Se connecter
4.3 Moyenne

CVE-2026-74248 OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization

Description

OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected.

Produits et versions touchés

Produit Versions touchées Corrigé en
Octavia 18.0.0 Pas de correctif indiqué
Octavia 17.0.0 Pas de correctif indiqué
Octavia 16.0 premières → < 16.0.2 16.0.2

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Octavia

Les 3 CVE de Octavia →
CVE-2026-94572 In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field… 9.4 Critique CVE-2026-94571 In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy… 9.4 Critique
Suivre cette CVE