CVE-2020-9543

An access flaw was found in openstack-manila, where the API did not validate the user/project on commands. A malicious user having the UUID of a share-network could view, update, delete, or share resources that did not belong to them. Attackers could also create resources on shared networks (for example, shared file systems or groups of shares).

Mitigation

There is no known mitigation for this issue, the flaw can only be resolved by applying updates.