2 matches found
openstack-cinder: silently access other user's volumes
A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit this vulnerability by detaching one of their volumes from Cinder. The highest impact is to confidentiality...
6.5CVSS5.7AI score0.01198EPSS
SaveExploits0References7
openstack-cinder: silently access other user's volumes
A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit this vulnerability by detaching one of their volumes from Cinder. The highest impact is to confidentiality...
6.5CVSS5.7AI score0.01198EPSS
SaveExploits0References7
20