Red Hat Security AdvisoryRHSA-2015:2673
openstack-nova security and bug fix advisory
Released 2015-12-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- OpenStack 7.0 Tools for RHEL 7 python-novaclient-1:2.23.0-2.el7ost, python-novaclient-doc-1:2.23.0-2.el7ost
- Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7 openstack-nova-2015.1.2-7.el7ost, openstack-nova-api-2015.1.2-7.el7ost, openstack-nova-cells-2015.1.2-7.el7ost +15
Fixes 1 record
Priority LOW 29
OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance tha…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.037 · Published 2015-10-29 · Fixed in 2014.2.4, 2015.1.2 CWE-254
