Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:11879
HistoryJan 15, 2019 - 9:09 a.m.

Authorization Bypass

2019-01-1509:09:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

openstack-nova is vulnerable to authorization bypass. A vulnerability was discovered in the way OpenStack Compute (nova) networking handled security group updates; changes were not applied to already running VM instances. A remote attacker could use this flaw to access running VM instances.

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N