Debian/manila: high 8.3
OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attacke
Action: Upgrade manila to 1:9.0.0-5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:9.0.0-5 | - |
Fixed versions
| 1:9.0.0-5 |
Sources
- osv: DEBIAN-CVE-2020-9543#Debian:14/manila
- https://security-tracker.debian.org/tracker/CVE-2020-9543
published · modified · JSON