DSA-4056-1 nova -- novaID: oval:org.secpod.oval:def:603203 | Date: (C)2017-12-15 (M)2022-08-31 |
Class: PATCH | Family: unix |
George Shuklin from servers.com discovered that Nova, a cloud computing fabric controller, did not correctly enforce its image- or hosts-filters. This allowed an authenticated user to bypass those filters by simply rebuilding an instance.
Product: |
nova-doc |
nova-cert |
nova-compute |
nova-conductor |
nova-api |
nova-common |
python-nova |
nova-network |
nova-volume |
nova-scheduler |
nova-console |
nova-placement-api |
nova-cells |