7.1

CVE-2013-7130

The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openstack ≫ Compute Version2012.2
Openstack ≫ Compute Version2013.1
Openstack ≫ Compute Version2013.1.1
Openstack ≫ Compute Version2013.1.2
Openstack ≫ Compute Version2013.1.3
Openstack ≫ Grizzly Version-
Openstack ≫ Havana Version-
Openstack ≫ Icehouse Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.54% 0.84
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.1 8.6 6.9
AV:N/AC:M/Au:N/C:C/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.