cbcvebase.
CVE-2015-2687
published 2017-08-09

CVE-2015-2687: OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have…

medium4.7CVSS 3.0
AVLACHPRLUINSUCHINAN
OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.

Affected

22 ranges
VendorProductVersion rangeFixed in
debiannova< nova 2014.1-1 (bookworm)nova 2014.1-1 (bookworm)
openstackcompute
openstackcompute
openstackcompute
openstackcompute
openstackcompute
openstackcompute
openstackcompute
openstackcompute
openstackcompute
openstackcompute
openstackcompute
openstackcompute
openstackcompute
openstackcompute
openstackcompute
openstackcompute
openstacknova>= 0 < 2014.1-12014.1-1
openstacknova>= 0 < 2014.1-12014.1-1
openstacknova>= 0 < 2014.1-12014.1-1
openstacknova>= 0 < 2014.1-12014.1-1
openstacknova>= 0 < 15.0.0.0b115.0.0.0b1

CVSS provenance

nvdv3.04.7MEDIUMCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
osv4.7MEDIUM