CVEvulnerability
CVE-2013-4497
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-11-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migration, which allows remote attackers to bypass intended restrictions.
Affected configurations
• openstack havana (<= havana-3)
• openstack havana havana-1
• openstack havana havana-2
• openstack grizzly
• openstack folsom
Related
Weakness · not in database (1)
References
- http://www.openwall.com/lists/oss-security/2013/11/03/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2013/11/03/3 www.openwall.com
- https://bugs.launchpad.net/nova/+bug/1073306 bugs.launchpad.net
- https://bugs.launchpad.net/nova/+bug/1202266 bugs.launchpad.net
- http://www.openwall.com/lists/oss-security/2013/11/03/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2013/11/03/3 www.openwall.com
- https://bugs.launchpad.net/nova/+bug/1073306 bugs.launchpad.net
- https://bugs.launchpad.net/nova/+bug/1202266 bugs.launchpad.net