[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

253562

 
 

909

 
 

197267

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2013-0335Date: (C)2013-03-23   (M)2023-12-22


OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.0
Exploit Score: 6.8
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: SINGLE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
SECUNIA-52337
SECUNIA-52728
OSVDB-90657
RHSA-2013:0709
USN-1771-1
http://www.openwall.com/lists/oss-security/2013/02/26/7
https://bugs.launchpad.net/nova/+bug/1125378
https://review.openstack.org/#/c/22086/
https://review.openstack.org/#/c/22758
https://review.openstack.org/#/c/22872/

CPE    5
cpe:/o:canonical:ubuntu_linux:12.04:-:lts
cpe:/a:openstack:folsom:2012.2
cpe:/a:openstack:essex:2012.1
cpe:/o:canonical:ubuntu_linux:12.10
...
CWE    1
CWE-264
OVAL    1
oval:org.secpod.oval:def:701225

© SecPod Technologies