~ / search / GHSA-qfp8-hfqx-c79c

GHSA-qfp8-hfqx-c79c

OpenStack Compute Nova Unauthorised access to arbitrary VM using VNC token from deleted VM

Source: GitHub Advisory Database (reviewed) High CVE-2013-0335

Packages

EcosystemPackageAffectedFixed in
PyPI Nova < 12.0.0a0 12.0.0a0

Details

As written in the advisory (Markdown source, shown as plain text).

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.

References

External links from the advisory. They lead to third-party sites.