Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2015-2687

OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.

VectorLOCAL

PublishedAug 09, 2017, 18:29

Published Bycve@mitre.org

Base Score

Score4.7

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

nova(PyPI)015.0.0.0b1N/A

References

http://www.openwall.com/lists/oss-security/2015/03/24/10
http://www.openwall.com/lists/oss-security/2015/03/25/3
http://www.securityfocus.com/bid/77505
https://bugs.launchpad.net/nova/+bug/1419577
https://bugzilla.redhat.com/show_bug.cgi?id=1205313
https://review.openstack.org/#/c/338929/

Weakness Type

CWE-284

CVSS Metrics

Base Score

4.7

Vector String

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Base SeverityMedium

Version

3.0

Attack Vector (AV)

LOCAL