Skip to content
OpenAdvisories
High RHSA-2020:2165 1 CVE

Red Hat Security Advisory: openstack-manila security update

Published Sep 13, 2024 · Updated Oct 8, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenStack 16 openstack:16::el8 openstack-manila 1:9.1.2-0.20200405045746.f071a43.el8ost
Red Hat · OpenStack 16 openstack:16::el8 openstack-manila-share 1:9.1.2-0.20200405045746.f071a43.el8ost
Red Hat · OpenStack 16 openstack:16::el8 python3-manila 1:9.1.2-0.20200405045746.f071a43.el8ost

Vulnerabilities 1

  • High 8.3
    CVE-2020-9543

    OpenStack Manila Unprivileged users can retrieve, use and manipulate share networks

    OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems a…

    manila manila manila Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1809855
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1824519
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2165.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-9543
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-9543
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-9543
  • article
    https://security.openstack.org/ossa/OSSA-2020-002.html