OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests. The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies for certain methods in compute/api.py when using non-default policies
Reporter | Title | Published | Views | Family All 19 |
---|---|---|---|---|
![]() | Design/Logic Flaw | 15 Apr 201414:55 | – | prion |
![]() | CVE-2014-0167 | 15 Apr 201414:00 | – | cvelist |
![]() | OpenStack Nova RBAC安全绕过漏洞 | 16 Apr 201400:00 | – | seebug |
![]() | CVE-2014-0167 | 15 Apr 201400:00 | – | ubuntucve |
![]() | OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests | 17 May 202204:41 | – | osv |
![]() | RHSA-2014:1084 Red Hat Security Advisory: openstack-nova security, bug fix, and enhancement update | 15 Sep 202421:53 | – | osv |
![]() | CVE-2014-0167 | 15 Apr 201414:55 | – | cve |
![]() | Fedora 20 : openstack-nova-2013.2.3-2.fc20 (2014-7954) | 14 Jul 201400:00 | – | nessus |
![]() | Ubuntu 14.04 LTS : OpenStack Nova vulnerabilities (USN-2247-1) | 18 Jun 201400:00 | – | nessus |
![]() | Privilege Escalation | 15 Jan 201908:59 | – | veracode |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo