CVE-2019-3895

An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitrary image. This meant that a remote attacker could upload a new amphorae image and, if requested to spawn new amphorae, Octavia would then pick up the compromised image.

• CWE-284

• https://access.redhat.com/errata/RHSA-2019:1683Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:1742Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3895Issue Tracking, Mitigation, Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:1683Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:1742Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3895Issue Tracking, Mitigation, Third Party Advisory

Published

Jun 3, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-3889A reflected XSS vulnerability exists in authorization flow o…5.4
• CVE-2019-3890It was discovered evolution-ews before 3.31.3 does not check…8.1
• CVE-2019-3891It was discovered that a world-readable log file belonging t…7.8
• CVE-2019-3892Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-3893In Foreman it was discovered that the delete compute resourc…4.9
• CVE-2019-3894It was discovered that the ElytronManagedThread in Wildfly's…8.8
• CVE-2019-3896A double-free can happen in idr_remove_all() in lib/idr.c in…7
• CVE-2019-3897It has been discovered in redhat-certification that any unau…5.3
• CVE-2019-3898Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-3899It was found that default configuration of Heketi does not r…9.8
• CVE-2019-3900An infinite loop issue was found in the vhost_net kernel mod…7.7
• CVE-2019-3901A race condition in perf_event_open() allows local attackers…4.7