Red Hat Security AdvisoryRHSA-2020:2729
openstack-manila and openstack-manila security update
Released 2020-06-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenStack Platform 13.0 openstack-manila-1:6.3.2-3.el7ost, openstack-manila-share-1:6.3.2-3.el7ost, python-manila-1:6.3.2-3.el7ost +1
- Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server openstack-manila-1:6.3.2-3.el7ost, openstack-manila-share-1:6.3.2-3.el7ost, python-manila-1:6.3.2-3.el7ost +1
Fixes 1 record
Priority LOW 39
OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID.
CVSS 3.1HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.01328 · Published 2020-03-12 · Partial fix · 7.4.1, 8.1.1 +1 CWE-276
