{"action":"Upgrade nova to 12.0.3 or later.","affected":[{"fixed":"12.0.3","introduced":"12.0.0"}],"component":"nova","cve_ids":["CVE-2016-2140"],"ecosystem":"PyPI","epss":0.02108,"exploited":false,"fixed_versions":["12.0.3"],"ghsa_id":"GHSA-49jv-37hm-6gfp","id":"tcs_01M5KEXRAZV51FMSXJJQZGNY73","modified_at":"2026-07-07T11:56:36.613317656Z","published_at":"2022-05-14T01:58:44Z","references":["https://osv.dev/vulnerability/GHSA-49jv-37hm-6gfp","https://nvd.nist.gov/vuln/detail/CVE-2016-2140","https://github.com/openstack/nova/commit/0b194187db9da28225cb5e62be3b45aff5a1c793","https://github.com/openstack/nova/commit/116b1210ab772c55d1ed1f715687d83877c92701","https://github.com/openstack/nova/commit/f302bf04ab5dda89cf8ceaeed309006da90c0666","https://access.redhat.com/errata/RHSA-2016:0363","https://access.redhat.com/errata/RHSA-2016:0364","https://access.redhat.com/errata/RHSA-2016:0365","https://access.redhat.com/errata/RHSA-2016:0366","https://access.redhat.com/security/cve/CVE-2016-2140","https://bugs.launchpad.net/nova/+bug/1548450","https://bugzilla.redhat.com/show_bug.cgi?id=1313454","https://github.com/openstack/nova","https://security.openstack.org/ossa/OSSA-2016-007.html","http://seclists.org/oss-sec/2016/q1/563","http://www.openwall.com/lists/oss-security/2016/03/08/6","http://www.securityfocus.com/bid/84277"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-49jv-37hm-6gfp","url":"https://osv.dev/vulnerability/GHSA-49jv-37hm-6gfp"}],"summary":"OpenStack Nova host data access through resize/migration"}