PT-2013-3626 · Openstack · Openstack Compute

Hzrandd · Publicado 2013-09-16 · Atualizado 2023-02-13 · CVE-2013-2256

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenStack Compute (Nova) versions before 2013.1.3 OpenStack Compute (Nova) Havana versions before havana-2

Description The issue allows remote authenticated users to obtain sensitive information, such as flavor properties, boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id, due to the improper enforcement of the os-flavor-access:is public property.

Recommendations For OpenStack Compute (Nova) versions before 2013.1.3, update to version 2013.1.3 or later. For OpenStack Compute (Nova) Havana versions before havana-2, update to havana-2 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-2256

GHSA-5MJ6-643F-2G85

RHSA-2013:1199

Produtos afetados

Openstack Compute

Referências · 12

• 🔥 https://bugs.launchpad.net/nova/+bug/1194093 · Exploit
• https://osv.dev/vulnerability/GHSA-5mj6-643f-2g85 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-2256 · Nota de Segurança
• http://rhn.redhat.com/errata/RHSA-2013-1199.html · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2013:1199 · Nota
• https://access.redhat.com/security/cve/CVE-2013-2256 · Nota
• https://security-tracker.debian.org/tracker/CVE-2013-2256 · Aviso do Fabricante
• http://seclists.org/oss-sec/2013/q3/281 · Correção
• https://osv.dev/vulnerability/CVE-2013-2256 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=993340 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-2256 · Aviso do Fabricante
• https://opendev.org/openstack/nova · Nota