medium4.7
CVE-2015-2687
OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissi…
Impact
OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openstack | Compute | Versions 2013.2, 2013.2.1, 2013.2.2, 2013.2.3, 2013.2.4, 2014.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2015/03/24/10
- http://www.openwall.com/lists/oss-security/2015/03/25/3
- http://www.securityfocus.com/bid/77505
- https://bugs.launchpad.net/nova/+bug/1419577
- https://bugzilla.redhat.com/show_bug.cgi?id=1205313
- https://review.openstack.org/#/c/338929/
- http://www.openwall.com/lists/oss-security/2015/03/24/10
- http://www.openwall.com/lists/oss-security/2015/03/25/3
- http://www.securityfocus.com/bid/77505
- https://bugs.launchpad.net/nova/+bug/1419577
- https://bugzilla.redhat.com/show_bug.cgi?id=1205313
- https://review.openstack.org/#/c/338929/