Red Hat Security AdvisoryRHSA-2016:0017
openstack-nova security advisory
Released 2016-01-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6 openstack-nova-2014.1.5-16.el6ost, openstack-nova-api-2014.1.5-16.el6ost, openstack-nova-cells-2014.1.5-16.el6ost +12
Fixes 2 records
Priority LOW 29
OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance tha…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.037 · Published 2015-10-29 · Fixed in 2014.2.4, 2015.1.2 CWE-254
Priority LOW 20
OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by ov…
CVSS 3.0LOW 3.5· Network · Low privileges · No interaction · EPSS 0.01803 · Published 2016-01-12 · Fixed CWE-200
