En bref
- CVE-2013-7048 est une vulnérabilité FAIBLE (CVSS 3.3) touchant nova, nova (openstack).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.48%, plus élevée que 41.4% des vulnérabilités.
- Correctif : mettre à jour vers 12.0.0a0 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| nova PyPI | < 12.0.0a0
| 12.0.0a0
|
| nova | ≥ 2013.1, ≤ 2013.1.4≥ 2013.2, ≤ 2013.2.1
| No fix yet |
Description
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
NVD description
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free