PyPI/nova CVE-2015-7713: medium, EPSS 3.70%
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction
Action: Upgrade nova to 2014.2.4 or later.
pip install nova==2014.2.4pip install nova==2015.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2014.2.4 | - |
| 2015.1.0 | 2015.1.2 | - |
Fixed versions
| 2014.2.4 | 2015.1.2 |
Sources
- osv: GHSA-67rh-9p29-vrxr
- https://nvd.nist.gov/vuln/detail/CVE-2015-7713
- https://access.redhat.com/errata/RHSA-2015:2673
- https://access.redhat.com/errata/RHSA-2015:2684
- https://access.redhat.com/errata/RHSA-2016:0013
- https://access.redhat.com/errata/RHSA-2016:0017
- https://access.redhat.com/security/cve/CVE-2015-7713
- https://bugs.launchpad.net/nova/+bug/1491307
- https://bugs.launchpad.net/nova/+bug/1492961
- https://bugzilla.redhat.com/show_bug.cgi?id=1269119
- https://opendev.org/openstack/nova
- https://security.openstack.org/ossa/OSSA-2015-021.html
- https://web.archive.org/web/20200228024902/http://www.securityfocus.com/bid/76960
- http://rhn.redhat.com/errata/RHSA-2015-2684.html
- http://www.securityfocus.com/bid/76960
CVE-2015-7713 · published · modified · JSON