CVE-2013-0335CWE-613

CVE-2013-0335

High · published March 23, 2013

CVSS v3.1
7.6
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.02140 · 81.8th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2013-03-23T01:55Z
Affected products (6)
ProductVersionsFixed in
openstack/essexall versions—
openstack/folsomall versions—
openstack/grizzlyall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
References (23)
http://rhn.redhat.com/errata/RHSA-2013-0709.html · [email protected]http://secunia.com/advisories/52337 · [email protected]http://secunia.com/advisories/52728 · [email protected]http://www.openwall.com/lists/oss-security/2013/02/26/7 · [email protected]http://www.osvdb.org/90657 · [email protected]http://www.ubuntu.com/usn/USN-1771-1 · [email protected]https://access.redhat.com/errata/RHSA-2013:0709 · [email protected]https://access.redhat.com/security/cve/CVE-2013-0335 · [email protected]https://bugs.launchpad.net/nova/+bug/1125378 · [email protected]https://github.com/advisories/GHSA-qfp8-hfqx-c79c · [email protected]https://review.openstack.org/#/c/22086/ · [email protected]https://review.openstack.org/#/c/22758 · [email protected]https://review.openstack.org/#/c/22872/ · [email protected]http://rhn.redhat.com/errata/RHSA-2013-0709.html · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/52337 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/52728 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2013/02/26/7 · af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/90657 · af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-1771-1 · af854a3a-2127-422b-91ae-364da2661108https://bugs.launchpad.net/nova/+bug/1125378 · af854a3a-2127-422b-91ae-364da2661108https://review.openstack.org/#/c/22086/ · af854a3a-2127-422b-91ae-364da2661108https://review.openstack.org/#/c/22758 · af854a3a-2127-422b-91ae-364da2661108https://review.openstack.org/#/c/22872/ · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 22 MAR 21:00Z
    OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances…
    cvelistv5