An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-cinder 15.x.x versions before openstack-cinder 15.2.0 and all openstack-cinder 16.x.x versions before openstack-cinder 16.1.0. When using openstack-cinder with the Dell EMC ScaleIO or VxFlex OS backend storage driver, credentials for the entire backend are exposed in the ``connection_info`` element in all Block Storage v3 Attachments API calls containing that element. This flaw enables an end-user to create a volume, make an API call to show the attachment detail information, and retrieve a username and password that may be used to connect to another user's volume. Additionally, these credentials are valid for the ScaleIO or VxFlex OS Management API, should an attacker discover the Management API endpoint. Source: OpenStack project

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f767d615-01db-47e9-b4ab-07bb8d3409fd advisory.

  - An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0,     all openstack-cinder 15.x.x versions before openstack-cinder 15.2.0 and all openstack-cinder 16.x.x     versions before openstack-cinder 16.1.0. When using openstack-cinder with the Dell EMC ScaleIO or VxFlex     OS backend storage driver, credentials for the entire backend are exposed in the ``connection_info``     element in all Block Storage v3 Attachments API calls containing that element. This flaw enables an end-     user to create a volume, make an API call to show the attachment detail information, and retrieve a     username and password that may be used to connect to another user's volume. Additionally, these     credentials are valid for the ScaleIO or VxFlex OS Management API, should an attacker discover the     Management API endpoint. Source: OpenStack project (CVE-2020-10755)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4283 advisory.

    OpenStack Block Storage (cinder) manages block storage mounting and the     presentation of such mounted block storage to instances. The backend     physical storage can consist of local disks, or Fiber Channel, iSCSI, and     NFS mounts attached to Compute nodes. In addition, Block Storage supports     volume backups, and snapshots for temporary save and restore operations.
    Programmatic management is available via Block Storage's API.

    Security Fix(es):

    * Improper handling of ScaleIO backend credentials (CVE-2020-10755)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page listed in the References section.

    For more information about the bug fixes and enhancements included with this update, see the Technical     Notes section of the Release Notes linked in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4391 advisory.

    OpenStack Block Storage (cinder) manages block storage mounting and the     presentation of such mounted block storage to instances. The backend     physical storage can consist of local disks, or Fiber Channel, iSCSI, and     NFS mounts attached to Compute nodes. In addition, Block Storage supports     volume backups, and snapshots for temporary save and restore operations.
    Programmatic management is available via Block Storage's API.

    Security Fix(es):

    * Improper handling of ScaleIO backend credentials (CVE-2020-10755)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Before this update, FC live migration was failing. With this update, the correct device information is     now sent to os-brick for FC for the corresponding host. Also, the device is now removed from the correct     masking view when the live migration process has failed on the Compute node. (BZ#1841157)

    * Before this update, the 3PAR driver did not look at the `_name_id` field for a possible volume ID, which     caused volumes to be unusable after a live migration. With this update, the driver is now aware of the     `_name_id` field as an alternative location for the volume ID, and live migrated volumes now work as     expected. (BZ#1841866)

    * Before this update, the internal temporary snapshot, created during async migration when creating a     volume from a snapshot, was not being deleted from the VNX storage.

    For example, if we create a new volume, V2, from snapshot S1, which we created from volume V1, an internal     temporary snapshot, S2, is created from copying S1. V1 now has two snapshots, S1 and S2. Although we     delete V1, V2 and S1 from OpenStack Block Storage (cinder), S2 is not deleted. This causes both V1 and S2     to remain on the VNX storage.

    With this update, the temporary snapshot, S2, is deleted, and V1 can be successfully deleted. (BZ#1843196)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4420-1 advisory.

    David Hill and Eric Harney discovered that Cinder and os-brick incorrectly handled ScaleIO backend     credentials. An attacker could possibly use this issue to expose sensitive information.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
174323	FreeBSD : py39-cinder -- insecure-credentials flaw (f767d615-01db-47e9-b4ab-07bb8d3409fd)	Nessus	FreeBSD Local Security Checks	medium
142034	RHEL 8 : openstack-cinder (RHSA-2020:4283)	Nessus	Red Hat Local Security Checks	medium
142029	RHEL 7 : openstack-cinder (RHSA-2020:4391)	Nessus	Red Hat Local Security Checks	medium
138208	Ubuntu 18.04 LTS / 20.04 LTS : Cinder and os-brick vulnerability (USN-4420-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2020-10755

medium

Tenable Plugins

medium

medium

medium

medium