Lucene search

K
githubGitHub Advisory DatabaseGHSA-RM86-H44C-2R2M
HistoryJul 24, 2024 - 6:31 a.m.

OpenStack Nova vulnerable to unauthorized access to potentially sensitive data

2024-07-2406:31:10
CWE-436
CWE-552
GitHub Advisory Database
github.com
10
openstack nova
vulnerability
unauthorized access
sensitive data
cve-2022-47951
cve-2024-32498
software

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

Low

EPSS

0.003

Percentile

66.0%

In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file’s contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498.

Affected configurations

Vulners
Node
-novaRange29.0.029.1.0
OR
-novaRange28.0.028.2.0
OR
-novaRange27.4.0
VendorProductVersionCPE
-nova*cpe:2.3:a:-:nova:*:*:*:*:*:*:*:*

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

Low

EPSS

0.003

Percentile

66.0%