Lucene search

[email protected]CVE-2015-2687

HistoryAug 09, 2017 - 6:29 p.m.

CVE-2015-2687

2017-08-0918:29:01

CWE-284

[email protected]

web.nvd.nist.gov

openstack

compute

nova

icehouse

juno

havana

vulnerability

vm volumes

unauthorized access

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.

Affected configurations

NVD

Node

openstackcomputeMatch2013.2

openstackcomputeMatch2013.2.1

openstackcomputeMatch2013.2.2

openstackcomputeMatch2013.2.3

openstackcomputeMatch2013.2.4

openstackcomputeMatch2014.1

openstackcomputeMatch2014.1.1

openstackcomputeMatch2014.1.2

openstackcomputeMatch2014.1.3

openstackcomputeMatch2014.1.4

openstackcomputeMatch2014.1.5

openstackcomputeMatch2014.2

openstackcomputeMatch2014.2.1

openstackcomputeMatch2014.2.2

openstackcomputeMatch2014.2.3

openstackcomputeMatch2014.2.4

CPENameOperatorVersion
openstack:computeopenstack computeeq2013.2
openstack:computeopenstack computeeq2013.2.1
openstack:computeopenstack computeeq2013.2.2
openstack:computeopenstack computeeq2013.2.3
openstack:computeopenstack computeeq2013.2.4
openstack:computeopenstack computeeq2014.1
openstack:computeopenstack computeeq2014.1.1
openstack:computeopenstack computeeq2014.1.2
openstack:computeopenstack computeeq2014.1.3
openstack:computeopenstack computeeq2014.1.4

CPE	Name	Operator	Version
openstack:compute	openstack compute	eq	2013.2
openstack:compute	openstack compute	eq	2013.2.1
openstack:compute	openstack compute	eq	2013.2.2
openstack:compute	openstack compute	eq	2013.2.3
openstack:compute	openstack compute	eq	2013.2.4
openstack:compute	openstack compute	eq	2014.1
openstack:compute	openstack compute	eq	2014.1.1
openstack:compute	openstack compute	eq	2014.1.2
openstack:compute	openstack compute	eq	2014.1.3
openstack:compute	openstack compute	eq	2014.1.4

Rows per page:

1-10 of 161

References

www.openwall.com/lists/oss-security/2015/03/24/10

www.openwall.com/lists/oss-security/2015/03/25/3

www.securityfocus.com/bid/77505

bugs.launchpad.net/nova/+bug/1419577

bugzilla.redhat.com/show_bug.cgi?id=1205313

review.openstack.org/#/c/338929/

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2015-2687

prion1 ubuntucve1 cvelist1 debiancve1 nvd1 github1