OpenStack Compute Nova Improper Access Control
The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migration, which allows remote attackers to bypass intended restrictions.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2013-4497US | medium6.4 | — | ||
The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migra… | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2013/11/03/2WEB
- http://www.openwall.com/lists/oss-security/2013/11/03/3WEB
- https://bugs.launchpad.net/nova/+bug/1073306WEB
- https://bugs.launchpad.net/nova/+bug/1202266WEB
- https://github.com/advisories/GHSA-27q4-38qf-m25hADVISORY
- https://github.com/openstack/novaPACKAGE
- https://github.com/openstack/nova/commit/01de658210fd65171bfbf5450c93673b5ce0bd9eWEB
- https://github.com/openstack/nova/commit/5cced7a6dd32d231c606e25dbf762d199bf9cca7WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan