GitHub Advisoryadvisory · PyPI
GHSA-grp5-h379-j75x OpenStack Nova live snapshots use an insecure local directory
LOW
Official page ↗
- Aliases
- CVE-2013-7048
- Ecosystem
- PyPI
- Packages
- nova
- Severity
- Low
- Reviewed
- 2024-05-14
Affected packages
• PyPI nova: < 12.0.0a0 → fixed in 12.0.0a0
Description
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
Related
Alias · CVE (1)
- CVE-2013-7048 OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the… vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2013-7048 advisory
- https://github.com/openstack/nova/commit/75be5abd6b3fa0f7f27fe9c805f832cd41d44a5d web
- https://github.com/openstack/nova/commit/8a34fc3d48c467aa196f65eed444ccdc7c02f19f web
- https://github.com/openstack/nova/commit/9bd7fff8c0160057643cfc37c5e2b1cd3337d6aa web
- https://bugs.launchpad.net/nova/+bug/1227027 web
- https://github.com/openstack/nova package
- http://rhn.redhat.com/errata/RHSA-2014-0231.html web
- http://www.openwall.com/lists/oss-security/2014/01/13/2 web