PyPI/nova CVE-2015-2687: medium 4.7, EPSS 0.34%

OpenStack Compute (Nova) Improper Access Control

Action: Upgrade nova to 15.0.0.0b1 or later.

pip install nova==15.0.0.0b1

Affected

Fixed versions

Sources

• osv: GHSA-97fv-22hc-mrgj
• https://nvd.nist.gov/vuln/detail/CVE-2015-2687
• https://github.com/openstack/nova/commit/b83cae02ece4c338e09c3606c6ae69b715bd6f8c
• https://bugs.launchpad.net/nova/+bug/1419577
• https://bugzilla.redhat.com/show_bug.cgi?id=1205313
• https://github.com/openstack/nova
• https://github.com/pypa/advisory-database/tree/main/vulns/nova/PYSEC-2017-145.yaml
• https://review.openstack.org/#/c/338929
• http://www.openwall.com/lists/oss-security/2015/03/24/10
• http://www.openwall.com/lists/oss-security/2015/03/25/3

CVE-2015-2687 · published 2022-05-17T01:57:43Z · modified 2024-11-26T18:21:48Z · JSON