CVE:CVE-2019-3683
CNNVD:CNNVD-202001-851
SUSE OpenStack Cloud是德国SUSE公司的一套基于软件的企业级数据储存解决方案。
SUSE Openstack Cloud 8 commit d7888c75505465490250c00cc0ef4bb1af662f9f之前版本中的keystone-json-assignment包存在命令注入漏洞。攻击者可利用该漏洞访问、修改、创建和删除任意资源。
solution:Upgrade suse openstack_cloud to a higher version than 8.0,and avoid the version 8.0; Upgrade suse keystone-json-assignment to a higher version than 2019-02-18,and avoid the version (,2019-02-18); Upgrade hp helion_openstack to a higher version than 8.0,and avoid the version 8.0