GitHub Advisoryadvisory · PyPI

GHSA-5mj6-643f-2g85 OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information

MEDIUM Published 2022-05-14 Modified 2023-02-08 Official page ↗
Aliases
CVE-2013-2256
Ecosystem
PyPI
Packages
nova
Severity
Moderate
Reviewed
2023-02-08

Affected packages

• PyPI nova: < 2013.1.3 → fixed in 2013.1.3

Description

OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id.

Related

Alias · CVE (1)

  • CVE-2013-2256 OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property,… vulnerability

References