CVE-2015-7713 | BDVDB-2026-72603 Detail

Description#

OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/76960
https://bugs.launchpad.net/nova/+bug/1491307
https://access.redhat.com/errata/RHSA-2015:2673
https://bugs.launchpad.net/nova/+bug/1492961
http://rhn.redhat.com/errata/RHSA-2015-2684.html
https://security.openstack.org/ossa/OSSA-2015-021.html

Exploit#

No public exploit known

History#

Version 12015-10-29Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.