OpenStack Compute Nova Unauthorised access to arbitrary VM using VNC token from deleted VM
OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2013-0335US | high7.6OT erhöht | — | ||
OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://github.com/openstack/nova/commit/05a3374992bc8ba53ddc9c491b51c4b59eed0a72WEB
- http://github.com/openstack/nova/commit/3b0f4cf6bea33e6ee1893f6e872d968b0c309f88WEB
- http://github.com/openstack/nova/commit/48e81f1554ce41c3d4f7445421d19f4a8128e98dWEB
- http://github.com/openstack/nova/commit/ad94a90202193335f011888db017e557b07faf8aWEB
- http://github.com/openstack/nova/commit/e98928cf77645fdc309da894f3bd332e99482e0dWEB
- http://rhn.redhat.com/errata/RHSA-2013-0709.htmlWEB
- http://www.openwall.com/lists/oss-security/2013/02/26/7WEB
- http://www.ubuntu.com/usn/USN-1771-1WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan