Staging Environment: Content and features may be unstable or change without notice.
Advisory details: pypa / nova/PYSEC-2026-867
Advisory ID pypa/nova/PYSEC-2026-867
Aliases CVE-2015-7713
GHSA-67rh-9p29-vrxr
PYSEC-2026-867
Summary OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
There are no known severity scores.
Reference id Reference type URL
https://bugs.launchpad.net/nova/+bug/1491307
https://bugs.launchpad.net/nova/+bug/1492961
https://bugzilla.redhat.com/show_bug.cgi?id=1269119
https://opendev.org/openstack/nova
https://pypi.org/project/nova
https://security.openstack.org/ossa/OSSA-2015-021.html
https://web.archive.org/web/20200228024902/http://www.securityfocus.com/bid/76960
http://www.securityfocus.com/bid/76960
CVE-2015-7713 https://access.redhat.com/security/cve/CVE-2015-7713
CVE-2015-7713 https://nvd.nist.gov/vuln/detail/CVE-2015-7713
GHSA-67rh-9p29-vrxr https://github.com/advisories/GHSA-67rh-9p29-vrxr
RHSA-2015:2673 https://access.redhat.com/errata/RHSA-2015:2673
RHSA-2015:2684 https://access.redhat.com/errata/RHSA-2015:2684
RHSA-2015-2684.html http://rhn.redhat.com/errata/RHSA-2015-2684.html
RHSA-2016:0013 https://access.redhat.com/errata/RHSA-2016:0013
RHSA-2016:0017 https://access.redhat.com/errata/RHSA-2016:0017

No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.

There are no known vectors.

There are no SSVC decisions available.