Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 4

Количество 4

ubuntu логотип

CVE-2013-6419

больше 12 лет назад

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by (1) api/metadata/handler.py in Nova and (2) the neutron-metadata-agent (agent/metadata/agent.py) in Neutron.

CVSS2: 5
EPSS: Низкий
nvd логотип

CVE-2013-6419

больше 12 лет назад

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by (1) api/metadata/handler.py in Nova and (2) the neutron-metadata-agent (agent/metadata/agent.py) in Neutron.

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2013-6419

больше 12 лет назад

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 ...

CVSS2: 5
EPSS: Низкий
github логотип

GHSA-22w9-j288-8p9w

около 4 лет назад

OpenStack Nova Router metadata queries are not restricted by tenant

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2013-6419

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by (1) api/metadata/handler.py in Nova and (2) the neutron-metadata-agent (agent/metadata/agent.py) in Neutron.

CVSS2: 5
2%
Низкий
больше 12 лет назад
nvd логотип
CVE-2013-6419

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by (1) api/metadata/handler.py in Nova and (2) the neutron-metadata-agent (agent/metadata/agent.py) in Neutron.

CVSS2: 5
2%
Низкий
больше 12 лет назад
debian логотип
CVE-2013-6419

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 ...

CVSS2: 5
2%
Низкий
больше 12 лет назад
github логотип
GHSA-22w9-j288-8p9w

OpenStack Nova Router metadata queries are not restricted by tenant

2%
Низкий
около 4 лет назад

Уязвимостей на страницу