Em resumo
- CVE-2013-7048 é uma vulnerabilidade BAIXO (CVSS 3.3) que afeta nova, nova (openstack).
- Chance de exploração nos próximos 30 dias (EPSS): 0.48%, maior que 41.4% das vulnerabilidades.
- Correção: atualize para 12.0.0a0 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| nova PyPI | < 12.0.0a0
| 12.0.0a0
|
| nova | ≥ 2013.1, ≤ 2013.1.4≥ 2013.2, ≤ 2013.2.1
| No fix yet |
Description
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
NVD description
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free