OpenStack Compute Nova Improper Access Control
The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migration, which allows remote attackers to bypass intended restrictions.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2013-4497US | medium6.4 | — | ||
The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migra… | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2013/11/03/2WEB
- http://www.openwall.com/lists/oss-security/2013/11/03/3WEB
- https://bugs.launchpad.net/nova/+bug/1073306WEB
- https://bugs.launchpad.net/nova/+bug/1202266WEB
- https://github.com/openstack/novaPACKAGE
- https://github.com/openstack/nova/commit/01de658210fd65171bfbf5450c93673b5ce0bd9eWEB
- https://github.com/openstack/nova/commit/5cced7a6dd32d231c606e25dbf762d199bf9cca7WEB
- https://github.com/openstack/nova/commit/ba0d007fb78bd1182c3c0b808dbd7ccc84640e80WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan