Red Hat Security AdvisoryRHSA-2020:2165
openstack-manila security update
Released 2020-05-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenStack Platform 16.0 openstack-manila-1:9.1.2-0.20200405045746.f071a43.el8ost, openstack-manila-share-1:9.1.2-0.20200405045746.f071a43.el8ost, python3-manila-1:9.1.2-0.20200405045746.f071a43.el8ost
Fixes 1 record
Priority LOW 39
OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID.
CVSS 3.1HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.01328 · Published 2020-03-12 · Partial fix · 7.4.1, 8.1.1 +1 CWE-276
