{"action":"Upgrade nova to 12.0.0a0 or later.","affected":[{"fixed":"12.0.0a0","introduced":"0"}],"component":"nova","cve_ids":["CVE-2013-6419"],"ecosystem":"PyPI","epss":0.01852,"exploited":false,"fixed_versions":["12.0.0a0"],"ghsa_id":"GHSA-22w9-j288-8p9w","id":"tcs_01M5KERHRR733Y2K6VHP6WMXRX","modified_at":"2026-07-07T11:56:14.230250314Z","published_at":"2022-05-17T04:50:15Z","references":["https://osv.dev/vulnerability/GHSA-22w9-j288-8p9w","https://nvd.nist.gov/vuln/detail/CVE-2013-6419","https://github.com/openstack/nova/commit/07006be9165d1008ca0382b6f0ad25b13a676a55","https://github.com/openstack/nova/commit/af2f823107010933ecd94a9c938f8b739baaecb7","https://github.com/openstack/nova/commit/bce36e9bdb1fcb9658f7b684d160e656e88d816c","https://bugs.launchpad.net/neutron/+bug/1235450","https://github.com/openstack/nova","https://review.openstack.org/#/c/61428/2/nova/api/metadata/handler.py","https://review.openstack.org/#/c/61439/1/neutron/agent/metadata/agent.py","http://rhn.redhat.com/errata/RHSA-2014-0091.html","http://rhn.redhat.com/errata/RHSA-2014-0231.html","http://www.openwall.com/lists/oss-security/2013/12/11/8","http://www.securityfocus.com/bid/64250"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-22w9-j288-8p9w","url":"https://osv.dev/vulnerability/GHSA-22w9-j288-8p9w"}],"summary":"OpenStack Nova Router metadata queries are not restricted by tenant"}