{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"27.4.0"},{"introduced":"28.0.0","last_affected":"28.2.0"},{"introduced":"29.0.0","last_affected":"29.1.0"}],"component":"nova","cve_ids":["CVE-2024-40767"],"ecosystem":"PyPI","epss":0.00949,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rm86-h44c-2r2m","id":"tcs_01M5KFY9H9YHYSAPNRYDH55HZ2","modified_at":"2026-07-07T17:56:30.078278926Z","published_at":"2024-07-24T06:31:10Z","references":["https://osv.dev/vulnerability/GHSA-rm86-h44c-2r2m","https://nvd.nist.gov/vuln/detail/CVE-2024-40767","https://github.com/openstack/nova","https://launchpad.net/bugs/2071734","https://lists.debian.org/debian-lts-announce/2024/09/msg00017.html","https://review.opendev.org/c/openstack/nova/+/924731","https://security.openstack.org","https://security.openstack.org/ossa/OSSA-2024-002.html","https://www.openwall.com/lists/oss-security/2024/07/23/2"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-rm86-h44c-2r2m","url":"https://osv.dev/vulnerability/GHSA-rm86-h44c-2r2m"}],"summary":"OpenStack Nova vulnerable to unauthorized access to potentially sensitive data"}