OpenStack Compute Nova Improper Access Control
The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migration, which allows remote attackers to bypass intended restrictions.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2013-4497US | medium6.4 | — | ||
The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migra… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://www.openwall.com/lists/oss-security/2013/11/03/2WEB
- http://www.openwall.com/lists/oss-security/2013/11/03/3WEB
- https://bugs.launchpad.net/nova/+bug/1073306WEB
- https://bugs.launchpad.net/nova/+bug/1202266WEB
- https://github.com/advisories/GHSA-27q4-38qf-m25hADVISORY
- https://github.com/openstack/novaPACKAGE
- https://github.com/openstack/nova/commit/01de658210fd65171bfbf5450c93673b5ce0bd9eWEB
- https://github.com/openstack/nova/commit/5cced7a6dd32d231c606e25dbf762d199bf9cca7WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan