In short
- CVE-2013-7048 is a LOW (CVSS 3.3) vulnerability affecting nova, nova (openstack).
- Chance of exploitation in the next 30 days (EPSS): 0.48%, higher than 41.4% of all vulnerabilities.
- Fix: update to 12.0.0a0 or later.
| Package | Affected versions | Patched versions |
|---|
| nova PyPI | < 12.0.0a0
| 12.0.0a0
|
| nova | ≥ 2013.1, ≤ 2013.1.4≥ 2013.2, ≤ 2013.2.1
| No fix yet |
Description
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
NVD description
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free