Red Hat Security AdvisoryRHSA-2020:1326
openstack-manila security update
Released 2020-04-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenStack Platform 15.0 openstack-manila-1:8.1.1-0.20200311070441.17b29e2.el8ost, openstack-manila-share-1:8.1.1-0.20200311070441.17b29e2.el8ost, python3-manila-1:8.1.1-0.20200311070441.17b29e2.el8ost
Fixes 1 record
Priority LOW 39
OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID.
CVSS 3.1HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.01328 · Published 2020-03-12 · Partial fix · 7.4.1, 8.1.1 +1 CWE-276
