CVE record · 1 source
CVE-2026-93856
CVSS 4.3In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API.
- Vendor
- Red Hat
- Product
- OpenStack
- CVSS
- 4.3
- Exposure class
- Hypervisor
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API.
In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making the Block Storage API v3.3 "List messages" call…