Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6q7v-7634-xrvf

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 3.5

Описание

OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.

OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.

EPSS

Процентиль: 39%
0.00172
Низкий

3.5 Low

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 3.5
ubuntu
около 10 лет назад

OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.

redhat
около 10 лет назад

OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.

CVSS3: 3.5
nvd
около 10 лет назад

OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.

CVSS3: 3.5
debian
около 10 лет назад

OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0 ...

EPSS

Процентиль: 39%
0.00172
Низкий

3.5 Low

CVSS3

Дефекты

CWE-200