5

CVE-2015-7713

OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openstack ≫ Nova Version >= 2014.2 < 2014.2.4
Openstack ≫ Nova Version >= 2015.1.0 < 2015.1.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.67% 0.882
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://rhn.redhat.com/errata/RHSA-2015-2684.html
Third Party Advisory
http://www.securityfocus.com/bid/76960
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2015:2673
Third Party Advisory
https://bugs.launchpad.net/nova/+bug/1491307
Third Party Advisory
https://bugs.launchpad.net/nova/+bug/1492961
Third Party Advisory
https://security.openstack.org/ossa/OSSA-2015-021.html
Vendor Advisory