Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-4497HistoryNov 05, 2013 - 8:55 p.m.
CVE-2013-4497
2013-11-0520:55:29
Debian Security Bug Tracker
security-tracker.debian.org
16
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
EPSS
0.004
Percentile
72.7%
The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migration, which allows remote attackers to bypass intended restrictions.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | nova | < 2013.2-1 | nova_2013.2-1_all.deb |
| Debian | 11 | all | nova | < 2013.2-1 | nova_2013.2-1_all.deb |
| Debian | 999 | all | nova | < 2013.2-1 | nova_2013.2-1_all.deb |
| Debian | 13 | all | nova | < 2013.2-1 | nova_2013.2-1_all.deb |
Related
github
github
OpenStack Compute Nova Improper Access Control
2022-05-17 04:58:30
nessus
nessus
Fedora 20 : openstack-nova-2013.2.1-2.fc20 (2013-23524)
2014-01-08 00:00:00
Fedora 19 : openstack-nova-2013.1.5-1.fc19 (2014-4188)
2014-04-03 00:00:00
prion
prion
Design/Logic Flaw
2013-11-05 20:55:00
nvd
nvd
CVE-2013-4497
2013-11-05 20:55:29
cve
cve
CVE-2013-4497
2013-11-05 20:55:29
veracode
veracode
Authorization Bypass
2019-01-15 08:59:47
cvelist
cvelist
CVE-2013-4497
2013-11-05 20:00:00
ubuntucve
ubuntucve
CVE-2013-4497
2013-11-05 00:00:00
redhat
redhat
(RHSA-2014:0366) Moderate: openstack-nova security and bug fix update
2014-04-03 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: openstack-nova-2013.2.1-2.fc20
2014-01-07 09:34:58
[SECURITY] Fedora 19 Update: openstack-nova-2013.1.5-1.fc19
2014-04-02 09:14:29
openvas
openvas
Fedora Update for openstack-nova FEDORA-2014-4188
2014-04-03 00:00:00
Fedora Update for openstack-nova FEDORA-2014-4188
2014-04-03 00:00:00
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
EPSS
0.004
Percentile
72.7%
Related for DEBIANCVE:CVE-2013-4497