A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.
{ "binaries": [ { "binary_name": "nova-ajax-console-proxy", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-api", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-api-metadata", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-api-os-compute", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-api-os-volume", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-cells", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-cert", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-common", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-compute", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-compute-kvm", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-compute-libvirt", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-compute-lxc", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-compute-qemu", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-compute-vmware", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-compute-xen", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-conductor", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-console", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-consoleauth", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-doc", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-network", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-novncproxy", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-scheduler", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-serialproxy", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-spiceproxy", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-volume", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "nova-xvpvncproxy", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" }, { "binary_name": "python-nova", "binary_version": "2:13.1.4-0ubuntu4.5+esm1" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "low" }
{ "binaries": [ { "binary_name": "nova-ajax-console-proxy", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-api", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-api-metadata", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-api-os-compute", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-api-os-volume", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-cells", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-common", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-compute", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-compute-kvm", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-compute-libvirt", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-compute-lxc", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-compute-qemu", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-compute-vmware", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-compute-xen", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-conductor", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-console", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-consoleauth", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-doc", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-network", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-novncproxy", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-placement-api", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-scheduler", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-serialproxy", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-spiceproxy", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-volume", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "nova-xvpvncproxy", "binary_version": "2:17.0.13-0ubuntu5.3" }, { "binary_name": "python-nova", "binary_version": "2:17.0.13-0ubuntu5.3" } ], "availability": "No subscription required", "ubuntu_priority": "low" }
{ "binaries": [ { "binary_name": "nova-ajax-console-proxy", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-api", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-api-metadata", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-api-os-compute", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-api-os-volume", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-cells", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-common", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-compute", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-compute-kvm", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-compute-libvirt", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-compute-lxc", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-compute-qemu", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-compute-vmware", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-compute-xen", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-conductor", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-doc", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-novncproxy", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-scheduler", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-serialproxy", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-spiceproxy", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "nova-volume", "binary_version": "2:21.2.4-0ubuntu2.1" }, { "binary_name": "python3-nova", "binary_version": "2:21.2.4-0ubuntu2.1" } ], "availability": "No subscription required", "ubuntu_priority": "low" }
{ "binaries": [ { "binary_name": "nova-ajax-console-proxy", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-api", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-api-metadata", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-api-os-compute", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-api-os-volume", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-cells", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-common", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-compute", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-compute-ironic", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-compute-kvm", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-compute-libvirt", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-compute-lxc", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-compute-qemu", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-compute-vmware", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-compute-xen", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-conductor", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-doc", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-novncproxy", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-scheduler", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-serialproxy", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-spiceproxy", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "nova-volume", "binary_version": "3:25.0.0-0ubuntu1" }, { "binary_name": "python3-nova", "binary_version": "3:25.0.0-0ubuntu1" } ], "availability": "No subscription required", "ubuntu_priority": "low" }