Lucene search
HistorySep 16, 2013 - 7:14 p.m.
CVE-2013-2256
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
6
Confidence
Low
EPSS
0.002
Percentile
62.0%
OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id.
Affected configurations
Node
openstacknovaRange2013.1–2013.1.3
ORopenstacknovaMatch2013.2milestone1
Related
prion
prion
Design/Logic Flaw
2013-09-16 19:14:00
Design/Logic Flaw
2013-09-16 19:14:00
cve
cve
CVE-2013-2256
2013-09-16 19:14:38
CVE-2013-4278
2013-09-16 19:14:39
veracode
veracode
Information Disclosure
2019-01-15 08:58:21
Denial Of Service (DoS)
2019-05-02 04:48:40
Denial Of Service (DoS)
2019-05-02 04:48:39
osv
osv
seebug
seebug
OpenStack Nova安全绕过漏洞
2013-08-11 00:00:00
cvelist
cvelist
CVE-2013-2256
2013-09-16 19:00:00
CVE-2013-4278
2013-09-16 19:00:00
debiancve
debiancve
CVE-2013-2256
2013-09-16 19:14:38
CVE-2013-4278
2013-09-16 19:14:39
github
github
ubuntucve
ubuntucve
CVE-2013-2256
2013-08-06 00:00:00
CVE-2013-4278
2013-09-16 00:00:00
nvd
nvd
CVE-2013-4278
2013-09-16 19:14:39
nessus
nessus
Fedora 19 : openstack-nova-2013.1.3-2.fc19 (2013-15373)
2013-09-05 00:00:00
Ubuntu 12.04 LTS / 12.10 / 13.04 : nova vulnerabilities (USN-2000-1)
2013-10-24 00:00:00
securityvulns
securityvulns
[USN-2000-1] Nova vulnerabilities
2013-10-28 00:00:00
OpenStack multiple security vulnerabilities
2013-12-23 00:00:00
ubuntu
ubuntu
Nova vulnerabilities
2013-10-23 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2000-1)
2013-10-29 00:00:00
Ubuntu Update for nova USN-2000-1
2013-10-29 00:00:00
Fedora Update for openstack-nova FEDORA-2013-15373
2013-09-06 00:00:00
redhat
redhat
(RHSA-2013:1199) Moderate: openstack-nova security and bug fix update
2013-09-03 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: openstack-nova-2013.1.3-2.fc19
2013-09-05 01:37:33
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
6
Confidence
Low
EPSS
0.002
Percentile
62.0%
Related for NVD:CVE-2013-2256