Skip to content
OpenAdvisories

Archive

7 January 2014

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium —

    OpenStack Nova Router metadata queries are not restricted by tenant

    Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port,…