openstack-nova: information leak
| Package(s): | openstack-nova |
CVE #(s): | CVE-2013-7130
|
| Created: | February 5, 2014 |
Updated: | February 5, 2014 |
| Description: |
From the Red Hat bugzilla:
Loganathan Parthipan from Hewlett Packard reported a vulnerability in
the Nova libvirt driver. By spawning a server with the same flavor as
another user's migrated virtual machine, an authenticated user can
potentially access that user's snapshot content resulting in information
leakage. Only setups using KVM live block migration are affected. |
| Alerts: |
|
