Lucene search

K
prionPRIOn knowledge basePRION:CVE-2013-6426
HistoryDec 14, 2013 - 5:21 p.m.

Stack overflow

2013-12-1417:21:00
PRIOn knowledge base
www.prio-n.com
1

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.2%

The cloudformation-compatible API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy rules, which allows local in-instance users to bypass intended access restrictions and (1) create a stack via the CreateStack method or (2) update a stack via the UpdateStack method.

CPENameOperatorVersion
heatle2013.2

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.2%