Authorization Bypass

2020-08-2703:57:23

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

authorization bypass

nova

block device

vulnerability

cinder volumes

destination host devices

EPSS

0.002

Percentile

54.1%

JSON

nova is vulnerable to authorization bypass. The vulnerability exists as it was possible to include block devices that maps to different Cinder volumes from the source, allowing access to destination host devices that share the same paths as the previous host devices.