Suse Cloud (Novell) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2014-04-04. Vendor: Novell.

CVEs of Suse Cloud

• CVE-2014-0592 - CVSS 7.5 (high), 2014-04-04: Barclamp (aka barclamp-network) 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not enable netfilter on bridges when creating new instances,…
• CVE-2012-0434 - CVSS 10 (critical), 2013-12-02: The server in Crowbar, as used in SUSE Cloud 1.0, uses weak permissions for the production.log file, which has unspecified impact and attack vectors.