CVE-2013-2256

OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote…

published September 16, 2013

CVSS
—
EPSS
2%
Percentile
78.7
In the wild
Unconfirmed
What it is

OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01844 · 78.7th percentile
Published
2013-09-16T19:00Z
EPSS history
Timeline
  • 16 SEP 19:00Z
    OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote…
    cvelistv5