PT-2015-7591 · Openstack+1 · Openstack Compute+1

Sreekumar S + 1 · Published 2015-10-29 · Updated 2023-02-13 · CVE-2015-7713

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions OpenStack Compute (Nova) versions prior to 2014.2.4 (juno) OpenStack Compute (Nova) versions 2015.1.x prior to 2015.1.2 (kilo)

Description The issue allows remote attackers to bypass intended restrictions by leveraging an instance that was running when security group changes were made, due to the improper application of these changes.

Recommendations For versions prior to 2014.2.4 (juno), update to version 2014.2.4 or later. For versions 2015.1.x prior to 2015.1.2 (kilo), update to version 2015.1.2 or later.

Fix

Weakness Enumeration

CWE-254

Related Identifiers

CVE-2015-7713

GHSA-67RH-9P29-VRXR

RHSA-2015:2673

RHSA-2015:2684

RHSA-2016:0013

RHSA-2016:0017

SUSE-SU-2015:2219-1

SUSE-SU-2015:2220-1

USN-3449-1

Affected Products

Openstack Compute

Ubuntu

References · 59

• https://osv.dev/vulnerability/DEBIAN-CVE-2015-7713 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8749 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-7713 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8749 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-5162 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-3241 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-3280 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-7713 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-7548 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-2684.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2015:2673 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7713 · Security Note
• https://ubuntu.com/security/CVE-2015-7713 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2015:2220-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3241 · Security Note