← Volver al buscador de CVEs

CVE-2026-74248

OpenStack Octavia

Descripción

OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project-s QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected.

CVSS 4.3EPSS 0.208%Riesgo 0.44
Ver fuente
Publicación
2026-08-14 21:17:58
Versiones afectadas
<=18.0.0
Tipo
Librería
Última modificación
2026-08-17 21:16:49
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N