Description
Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI parameter.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nova | 2012.1~rc1-1 | — |
| Debian 13 | nova | 2012.1~rc1-1 | — |
| Debian 12 | nova | 2012.1~rc1-1 | — |
References
- nova-security-bypass(72296) vdb-entry
- 47543 third-party-advisory
- USN-1326-1 vendor-advisory
- https://github.com/openstack/nova/commit/3d4ffb64f1e18117240c26809788528979e3bd15#diff-0
- [openstack] 20120111 [OSSA 2012-001] Tenant bypass by authenticated users using OpenStack API (CVE-2012-0030) mailing-list
- 51370 vdb-entry