GitHub Advisoryadvisory · PyPI

GHSA-97fv-22hc-mrgj OpenStack Compute (Nova) Improper Access Control

MEDIUM Published 2022-05-17 Modified 2024-11-26 Official page ↗
Aliases
CVE-2015-2687
Ecosystem
PyPI
Packages
nova
Severity
Moderate
CVSS vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-284
Reviewed
2024-05-14

Affected packages

• PyPI nova: < 15.0.0.0b1 → fixed in 15.0.0.0b1

Description

OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.

Related

Alias · CVE (1)

  • CVE-2015-2687 OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would… vulnerability

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References