CVE-2020-9543

OpenStack Manila =8.0.0 =9.0.0 9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems and groups of shares on such share networks...

CVE-2020-9543: Incorrect Default Permissions

OpenStack Manila =8.0.0 =9.0.0 9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems and groups of shares on such share networks...

PT-2020-2668

Name of the Vulnerable Software and Affected Versions OpenStack Manila versions prior to 7.4.1 OpenStack Manila versions 8.0.0 through 8.1.0 OpenStack Manila versions 9.0.0 through 9.1.0 Description The issue allows attackers to view, update, delete, or share resources that do not belong to them...