Read the docs
TI-2013-03945 Aliases CVE-2013-4497GHSA-27q4-38qf-m25h

The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2…

Priority LOW 32CWE-264Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Partial · Partial · None
Fix status
Partial Red Hat: 1 fixed, 1 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-264.

Summary

The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migration, which allows remote attackers to bypass intended restrictions.

Why it matters now

EPSS 0.01823 78th percentileScored 2026-11-07
Fix Partial nova (PyPI): 12.0.0a0Red Hat: 1 advisoryRed Hat: 1 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—nova (PyPI)before 12.0.0a012.0.0a0Patch availableGHSA-27q4-38qf-m25h
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • nova (PyPI) Vendor— Affected before 12.0.0a0 Fixed in 12.0.0a0 Patch available GHSA-27q4-38qf-m25h

CPE configurations NVD · 5

CPEVersionsRoleVendor
cpe:2.3:a:openstack:havana:*:*:*:*:*:*:*:*up to havana-3VulnerableOpenStack
cpe:2.3:a:openstack:havana:havana-1:*:*:*:*:*:*:*havana-1VulnerableOpenStack
cpe:2.3:a:openstack:havana:havana-2:*:*:*:*:*:*:*havana-2VulnerableOpenStack
cpe:2.3:a:openstack:grizzly:-:*:*:*:*:*:*:*not specified by NVDVulnerableOpenStack
cpe:2.3:a:openstack:folsom:-:*:*:*:*:*:*:*not specified by NVDVulnerableOpenStack
  • cpe:2.3:a:openstack:havana:*:*:*:*:*:*:*:* Versions up to havana-3 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:havana:havana-1:*:*:*:*:*:*:* Versions havana-1 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:havana:havana-2:*:*:*:*:*:*:* Versions havana-2 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:grizzly:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:folsom:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·OpenStack

Remediation

  • Fix · GHSA-27q4-38qf-m25h nova (PyPI) Fixed in 12.0.0a0 Advisory →

Red Hat 1 advisory

  • RHSA-2014:0366 Released 2014-04-03 · Red Hat rating Moderate
    openstack-nova security and bug fix update
    • Red Hat Enterprise Linux OpenStack Platform 3.0 openstack-nova-2013.1.5-2.el6ost, openstack-nova-api-2013.1.5-2.el6ost, openstack-nova-cells-2013.1.5-2.el6ost +10

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenStack Platform 4AffectedNo fix yet
Red Hat Enterprise Linux OpenStack Platform 3.0Fixed RHSA-2014:0366

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-4497
  2. 2026-10-03 Alias added: GHSA-27q4-38qf-m25h

References

Advisory 1

Other 9

  • TI-2013-00195 Packstack: packstack: arbitrary file overwrite via symlink attack CVSS 3.1HIGH 8.8
  • TI-2013-01930 XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and… CVSS 2.0HIGH 7.5
  • TI-2013-00265 Openstack nova: vnc proxy can connect to the wrong vm CVSS 3.1HIGH 7.6
  • TI-2013-01648 OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for… CVSS 2.0MEDIUM 6.8
  • TI-2013-00142 The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using… CVSS 2.0MEDIUM 6.5
  • TI-2012-04728 Openstack nova: information leak in libvirt lvm-backed instances CVSS 3.1MEDIUM 6.5
See all 24 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences