GitHub Advisoryadvisory · PyPI

GHSA-67rh-9p29-vrxr OpenStack Compute (Nova) allows remote attackers to bypass intended restriction

MEDIUM Published 2022-05-14 Modified 2023-02-08 Official page ↗
Aliases
CVE-2015-7713
Ecosystem
PyPI
Packages
nova
Severity
Moderate
Reviewed
2023-02-08

Affected packages

• PyPI nova: < 2014.2.4 → fixed in 2014.2.4 • PyPI nova: >= 2015.1.0, < 2015.1.2 → fixed in 2015.1.2

Description

OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made.

Related

Alias · CVE (1)

  • CVE-2015-7713 OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which… vulnerability

References