Lucene search
Veracode Vulnerability DatabaseVERACODE:11291HistoryJan 15, 2019 - 8:59 a.m.
Authorization Bypass
2019-01-1508:59:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.007 Low
EPSS
Percentile
80.9%
openstack-nova is vulnerable to authorization bypass attacks. The vulnerability exists as the XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migration, which allows remote attackers to bypass intended restrictions.
References
www.openwall.com/lists/oss-security/2013/11/03/2
www.openwall.com/lists/oss-security/2013/11/03/3
access.redhat.com/security/updates/classification/#moderate
bugs.launchpad.net/nova/+bug/1073306
bugs.launchpad.net/nova/+bug/1202266
bugzilla.redhat.com/show_bug.cgi?id=1038239
rhn.redhat.com/errata/RHSA-2014-0366.html
Related
github
github
OpenStack Compute Nova Improper Access Control
2022-05-17 04:58:30
cve
cve
CVE-2013-4497
2013-11-05 20:55:29
cvelist
cvelist
CVE-2013-4497
2013-11-05 20:00:00
prion
prion
Design/Logic Flaw
2013-11-05 20:55:00
nvd
nvd
CVE-2013-4497
2013-11-05 20:55:29
ubuntucve
ubuntucve
CVE-2013-4497
2013-11-05 00:00:00
nessus
nessus
Fedora 20 : openstack-nova-2013.2.1-2.fc20 (2013-23524)
2014-01-08 00:00:00
Fedora 19 : openstack-nova-2013.1.5-1.fc19 (2014-4188)
2014-04-03 00:00:00
debiancve
debiancve
CVE-2013-4497
2013-11-05 20:55:29
redhat
redhat
(RHSA-2014:0366) Moderate: openstack-nova security and bug fix update
2014-04-03 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: openstack-nova-2013.2.1-2.fc20
2014-01-07 09:34:58
[SECURITY] Fedora 19 Update: openstack-nova-2013.1.5-1.fc19
2014-04-02 09:14:29
openvas
openvas
Fedora Update for openstack-nova FEDORA-2014-4188
2014-04-03 00:00:00
Fedora Update for openstack-nova FEDORA-2014-4188
2014-04-03 00:00:00