Skip to content
OpenAdvisories
High RHSA-2020:2729 1 CVE

Red Hat Security Advisory: openstack-manila and openstack-manila security update

Published Sep 13, 2024 · Updated Oct 8, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · OpenStack 13 openstack:13::el7 openstack-manila 1:6.3.2-3.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-manila-share 1:6.3.2-3.el7ost
Red Hat · OpenStack 13 openstack:13::el7 python-manila 1:6.3.2-3.el7ost
Red Hat · OpenStack 13 openstack:13::el7 python-manila-tests 1:6.3.2-3.el7ost

Vulnerabilities 1

  • High 8.3
    CVE-2020-9543

    OpenStack Manila Unprivileged users can retrieve, use and manipulate share networks

    OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems a…

    manila manila manila Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1809855
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1832361
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2729.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-9543
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-9543
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-9543
  • article
    https://security.openstack.org/ossa/OSSA-2020-002.html