CVE-2015-7713
Published Oct 29, 2015
Last updated 2 years ago
Overview
- Description
- OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made.
- Source
- secalert@redhat.com
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-254
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E483493-8EAA-4772-85E6-8F05C8F0C9F4",
"versionEndExcluding": "2014.2.4",
"versionStartIncluding": "2014.2"
},
{
"criteria": "cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F2937D9-1DB2-4C70-B5AA-E9E847090F6E",
"versionEndExcluding": "2015.1.2",
"versionStartIncluding": "2015.1.0"
}
],
"operator": "OR"
}
]
}
]