CVE-2023-2088CWE-440

A flaw was found in OpenStack due to an inconsistency between Cinder and Nova

Medium · published May 12, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit this vulnerability by detaching one of their volumes from Cinder. The highest impact is to confidentiality.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01198 · 67.9th percentile
Weakness
CWE-440 · Expected Behavior Violation
Published
2023-05-12T00:00Z
EPSS history
Timeline
  • 12 MAY 00:00Z
    A flaw was found in OpenStack due to an inconsistency between Cinder and Nova
    cvelistv5