Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:11879
HistoryJan 15, 2019 - 9:09 a.m.

Authorization Bypass

2019-01-1509:09:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

EPSS

0.005

Percentile

77.2%

openstack-nova is vulnerable to authorization bypass. A vulnerability was discovered in the way OpenStack Compute (nova) networking handled security group updates; changes were not applied to already running VM instances. A remote attacker could use this flaw to access running VM instances.