OpenStack Compute (Nova) Improper Access Control

MEDIUM 4.7CVE-2015-2687 · GHSA-97fv-22hc-mrgj · PYSEC-2017-145 · Published 09/08/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
nova PyPI	`< 15.0.0.0b1`	`15.0.0.0b1`
compute openstack	`= 2013.2= 2013.2.1= 2013.2.2= 2013.2.3= 2013.2.4= 2014.1= 2014.1.1= 2014.1.2= 2014.1.3= 2014.1.4= 2014.1.5= 2014.2= 2014.2.1= 2014.2.2= 2014.2.3= 2014.2.4`	No fix yet

Description

OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.

NVD description

OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.

References

nvd.nist.gov/vuln/detail/CVE-2015-2687 · ADVISORY
openstack/nova commit b83cae0 · WEB
bugs.launchpad.net/nova/+bug/1419577 · WEB
bugzilla.redhat.com/show_bug.cgi · WEB
openstack/nova · PACKAGE
pypa/advisory-database · WEB
review.openstack.org · WEB
openwall.com/lists/oss-security/2015/03/24/10 · WEB
openwall.com/lists/oss-security/2015/03/25/3 · WEB
securityfocus.com/bid/77505 · Third Party Advisory
review.openstack.org · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free