CVEvulnerability
CVE-2015-7713
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-10-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-254
Description
OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made.
Affected configurations
• openstack nova (>= 2014.2 < 2014.2.4)
• openstack nova (>= 2015.1.0 < 2015.1.2)
Related
Weakness · not in database (1)
References
- http://rhn.redhat.com/errata/RHSA-2015-2684.html Third Party Advisory
- http://www.securityfocus.com/bid/76960 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2015:2673 Third Party Advisory
- https://bugs.launchpad.net/nova/+bug/1491307 Third Party Advisory
- https://bugs.launchpad.net/nova/+bug/1492961 Third Party Advisory
- https://security.openstack.org/ossa/OSSA-2015-021.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2684.html Third Party Advisory
- http://www.securityfocus.com/bid/76960 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2015:2673 Third Party Advisory
- https://bugs.launchpad.net/nova/+bug/1491307 Third Party Advisory
- https://bugs.launchpad.net/nova/+bug/1492961 Third Party Advisory
- https://security.openstack.org/ossa/OSSA-2015-021.html Vendor Advisory