CVE-2015-2687

Опубликовано: 09 авг. 2017

Источник: nvd

CVSS3: 4.7

CVSS2: 1.9

EPSS Низкий

Описание

OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.

Ссылки

http://www.openwall.com/lists/oss-security/2015/03/24/10
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/03/25/3
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/77505
Third Party Advisory
VDB Entry
https://bugs.launchpad.net/nova/+bug/1419577
Issue Tracking
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1205313
Issue Tracking
Third Party Advisory
VDB Entry
https://review.openstack.org/#/c/338929/
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/03/24/10
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/03/25/3
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/77505
Third Party Advisory
VDB Entry
https://bugs.launchpad.net/nova/+bug/1419577
Issue Tracking
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1205313
Issue Tracking
Third Party Advisory
VDB Entry
https://review.openstack.org/#/c/338929/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openstack:compute:2013.2:*:*:*:*:*:*:*

cpe:2.3:a:openstack:compute:2013.2.1:*:*:*:*:*:*:*

cpe:2.3:a:openstack:compute:2013.2.2:*:*:*:*:*:*:*

cpe:2.3:a:openstack:compute:2013.2.3:*:*:*:*:*:*:*

cpe:2.3:a:openstack:compute:2013.2.4:*:*:*:*:*:*:*

cpe:2.3:a:openstack:compute:2014.1:*:*:*:*:*:*:*

cpe:2.3:a:openstack:compute:2014.1.1:*:*:*:*:*:*:*

cpe:2.3:a:openstack:compute:2014.1.2:*:*:*:*:*:*:*

cpe:2.3:a:openstack:compute:2014.1.3:*:*:*:*:*:*:*

cpe:2.3:a:openstack:compute:2014.1.4:*:*:*:*:*:*:*

cpe:2.3:a:openstack:compute:2014.1.5:*:*:*:*:*:*:*

cpe:2.3:a:openstack:compute:2014.2:*:*:*:*:*:*:*

cpe:2.3:a:openstack:compute:2014.2.1:*:*:*:*:*:*:*

cpe:2.3:a:openstack:compute:2014.2.2:*:*:*:*:*:*:*

cpe:2.3:a:openstack:compute:2014.2.3:*:*:*:*:*:*:*

cpe:2.3:a:openstack:compute:2014.2.4:*:*:*:*:*:*:*

EPSS

Процентиль: 16%

0.00051

Низкий

4.7 Medium

CVSS3

1.9 Low

CVSS2

Дефекты

CWE-284

Связанные уязвимости

CVE-2015-2687

CVSS3: 4.7

ubuntu

больше 8 лет назад

OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.

CVE-2015-2687

redhat

почти 11 лет назад

OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.

CVE-2015-2687

CVSS3: 4.7

debian

больше 8 лет назад

OpenStack Compute (nova) Icehouse, Juno and Havana when live migration ...

GHSA-97fv-22hc-mrgj

CVSS3: 4.7

github

больше 3 лет назад

OpenStack Compute (Nova) Improper Access Control

EPSS

Процентиль: 16%

0.00051

Низкий

4.7 Medium

CVSS3

1.9 Low

CVSS2

Дефекты

CWE-284