Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6q7v-7634-xrvf

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 3.5

Описание

OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.

OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.

EPSS

Процентиль: 79%
0.01803
Низкий

3.5 Low

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 3.5
ubuntu
почти 11 лет назад

OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.

redhat
почти 11 лет назад

OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.

CVSS3: 3.5
nvd
почти 11 лет назад

OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.

CVSS3: 3.5
debian
почти 11 лет назад

OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0 ...

CVSS3: 5.9
altlinux
больше 10 лет назад

ALT-PU-2016-3275: package `openstack-nova` update to version 12.0.2-alt1

EPSS

Процентиль: 79%
0.01803
Низкий

3.5 Low

CVSS3

Дефекты

CWE-200