The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| nova(PyPI) | 0 | 12.0.0a0 | N/A |
CVSS Metrics
