CVE-2016-2102

HAProxy statistics in openstack-tripleo-image-elements are non-authenticated over the network.

• CWE-287

• https://bugzilla.redhat.com/show_bug.cgi?id=1311145Issue Tracking, Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1311145Issue Tracking, Third Party Advisory, VDB Entry

Published

Aug 22, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-2094The HTTPS NIO Connector allows remote attackers to cause a d…
• CVE-2016-2097Directory traversal vulnerability in Action View in Ruby on …
• CVE-2016-2098Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1…
• CVE-2016-2099Use-after-free vulnerability in validators/DTD/DTDScanner.cp…
• CVE-2016-2100Foreman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow rem…
• CVE-2016-2101Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-2103Multiple cross-site scripting (XSS) vulnerabilities in Red H…
• CVE-2016-2104Multiple cross-site scripting (XSS) vulnerabilities in Red H…
• CVE-2016-2105Integer overflow in the EVP_EncodeUpdate function in crypto/…7.5
• CVE-2016-2106Integer overflow in the EVP_EncryptUpdate function in crypto…
• CVE-2016-2107The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2…5.9
• CVE-2016-2108The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 …