6

CVE-2013-2256

Exploit

OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id.

Data is provided by the National Vulnerability Database (NVD)
Openstack ≫ Nova Version >= 2013.1 < 2013.1.3
Openstack ≫ Nova Version2013.2 Updatemilestone1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.34% 0.538
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6 6.8 6.4
AV:N/AC:M/Au:S/C:P/I:P/A:P
http://seclists.org/oss-sec/2013/q3/281
Patch
Third Party Advisory
Mailing List
https://bugs.launchpad.net/nova/+bug/1194093
Third Party Advisory
Exploit