Designate vulnerabilities
1 known vulnerability in Designate from OpenStack. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.6average CVSS score
Latest first
- 9.6 Critical severity
Designate: Incorrect Authorization
In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different pool via the Att