Openstack Magnum vulnerabilities

2 CVEs affecting Openstack Magnum, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-28718, published 2024-04-12.

More from Openstack.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-7404, published 2019-06-21. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. OpenStack Magnum passes OpenStack credentials into the Heat templates creating its instances. While these should just be used for retrieving the instances' SSL certificates, they allow full API…
• CVE-2024-28718, published 2024-04-12. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py. component.