In breve
- CVE-2013-7048 è una vulnerabilità BASSO (CVSS 3.3) che riguarda nova, nova (openstack).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.48%, superiore al 41.4% delle vulnerabilità.
- Correzione: aggiornare a 12.0.0a0 o successiva.
| Package | Affected versions | Patched versions |
|---|
| nova PyPI | < 12.0.0a0
| 12.0.0a0
|
| nova | ≥ 2013.1, ≤ 2013.1.4≥ 2013.2, ≤ 2013.2.1
| No fix yet |
Description
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
NVD description
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free