CVE-2013-4278

The "create an instance" API in OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:is_public property, which…

published September 16, 2013

CVSS
—
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

The "create an instance" API in OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to boot arbitrary flavors by guessing the flavor id. NOTE: this issue is due to an incomplete fix for CVE-2013-2256.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01509 · 74.2th percentile
Published
2013-09-16T19:00Z
EPSS history
Timeline
  • 16 SEP 19:00Z
    The "create an instance" API in OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:is_public property, which…
    cvelistv5