{"action":"Upgrade nova to 2013.2.3-1 or later.","affected":[{"fixed":"2013.2.3-1","introduced":"0"}],"component":"nova","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["2013.2.3-1"],"id":"tcs_01M5NANW4EBG8XTY1NJEQYD5KB","modified_at":"2026-10-23T15:47:38.055287181Z","published_at":"2014-04-15T14:55:04.200Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2014-0167","https://security-tracker.debian.org/tracker/CVE-2014-0167"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2014-0167","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2014-0167"}],"summary":"The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies for (1) add_rules, (2) remove_rules, ("}