ID |
CVE-2014-2573
|
Sažetak |
The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does not properly put VMs into RESCUE status, which allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by requesting the VM be put into rescue and then deleting the image. |
Reference |
|
CVSS |
Base: | 2.3 |
Impact: | 2.9 |
Exploitability: | 4.4 |
|
Pristup |
Vektor | Složenost | Autentikacija |
ADJACENT_NETWORK |
MEDIUM |
SINGLE |
|
Impact |
Povjerljivost | Cjelovitost | Dostupnost |
NONE |
NONE |
PARTIAL |
|
CVSS vektor |
AV:A/AC:M/Au:S/C:N/I:N/A:P |
Zadnje važnije ažuriranje |
26-03-2014 - 13:41 |
Objavljeno |
25-03-2014 - 16:55 |