affected:
- package:
    ecosystem: PyPI
    name: nova
    purl: pkg:pypi/nova
  ranges:
  - events:
    - introduced: '0'
    - fixed: 15.0.0.0b1
    type: ECOSYSTEM
aliases:
- CVE-2015-2687
- GHSA-97fv-22hc-mrgj
details: OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails
  allows local users to access VM volumes that they would normally not have permissions
  for.
id: PYSEC-2017-145
modified: '2024-11-25T18:35:18.357593Z'
published: '2017-08-09T18:29:00Z'
references:
- type: WEB
  url: https://review.openstack.org/#/c/338929/
- type: REPORT
  url: https://bugzilla.redhat.com/show_bug.cgi?id=1205313
- type: ADVISORY
  url: https://bugzilla.redhat.com/show_bug.cgi?id=1205313
- type: REPORT
  url: https://bugs.launchpad.net/nova/+bug/1419577
- type: WEB
  url: https://bugs.launchpad.net/nova/+bug/1419577
- type: ADVISORY
  url: https://bugs.launchpad.net/nova/+bug/1419577
- type: WEB
  url: http://www.securityfocus.com/bid/77505
- type: ADVISORY
  url: http://www.securityfocus.com/bid/77505
- type: ARTICLE
  url: http://www.openwall.com/lists/oss-security/2015/03/25/3
- type: WEB
  url: http://www.openwall.com/lists/oss-security/2015/03/25/3
- type: ARTICLE
  url: http://www.openwall.com/lists/oss-security/2015/03/24/10
- type: WEB
  url: http://www.openwall.com/lists/oss-security/2015/03/24/10
severity:
- score: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
  type: CVSS_V3