PT-2015-7591 · Openstack+1 · Openstack Compute+1

Sreekumar S + 1 · Publicado 2015-10-29 · Atualizado 2023-02-13 · CVE-2015-7713

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions OpenStack Compute (Nova) versions prior to 2014.2.4 (juno) OpenStack Compute (Nova) versions 2015.1.x prior to 2015.1.2 (kilo)

Description The issue allows remote attackers to bypass intended restrictions by leveraging an instance that was running when security group changes were made, due to the improper application of these changes.

Recommendations For versions prior to 2014.2.4 (juno), update to version 2014.2.4 or later. For versions 2015.1.x prior to 2015.1.2 (kilo), update to version 2015.1.2 or later.

Correção

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

CVE-2015-7713

GHSA-67RH-9P29-VRXR

RHSA-2015:2673

RHSA-2015:2684

RHSA-2016:0013

RHSA-2016:0017

SUSE-SU-2015:2219-1

SUSE-SU-2015:2220-1

USN-3449-1

Produtos afetados

Openstack Compute

Ubuntu

Referências · 59

• https://bugzilla.suse.com/939691 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-7713 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-3221 · Nota
• https://suse.com/support/update/announcement/2015/suse-su-20152220-1 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8749 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-7713 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-8749 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-3241 · Nota
• http://openwall.com/lists/oss-security/2015/10/05/10 · Nota
• https://ubuntu.com/security/CVE-2015-5162 · Aviso do Fabricante
• https://bugzilla.suse.com/943648 · Nota
• https://ubuntu.com/security/CVE-2015-3241 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-3280 · Aviso do Fabricante
• https://bugzilla.suse.com/935263 · Nota
• https://security-tracker.debian.org/tracker/CVE-2015-7713 · Aviso do Fabricante