Approved changes feed: RSS · Atom

cpe:2.3:a:openstack:magnum:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorOpenstack (7b0cf974-b2b5-592e-bdf4-6953805ef02a)
ProductMagnum (1f8e1cc2-91bd-50a4-ad24-9851045ce7d7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/slivajakub/magnum purl2cpe 2026-06-01 10:17:03.662730
pkg:deb/debian/magnum purl2cpe 2026-06-01 10:17:03.662733
pkg:deb/ubuntu/magnum purl2cpe 2026-06-01 10:17:03.662736
pkg:github/openstack/magnum purl2cpe 2026-06-01 10:17:03.662738
pkg:pypi/magnum purl2cpe 2026-06-01 10:17:03.662741

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-28718 vulnerable 2026-06-03 14:55:25.652572 Details available
An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py. component.
Published: 2024-04-12T00:00:00.000Z
Updated: 2024-08-15T18:55:40.692Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7404 vulnerable 2026-06-03 14:36:07.386480 Details available
OpenStack Magnum passes OpenStack credentials into the Heat templates creating its instances. While these should just be used for retrieving the instances' SSL certificates, they allow full API access, though and can be used to perform any API operation the user is authorized to perform.
Published: 2019-06-21T13:17:11.000Z
Updated: 2024-08-06T01:57:47.553Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.