GHSA-jx7v-gmqc-6xrjHighCVSS 8.3

OpenStack Manila Unprivileged users can retrieve, use and manipulate share networks

Published
May 24, 2022
Last Modified
September 30, 2024

🔗 CVE IDs covered (1)

CVE-2020-9543 →

📋 Description

OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems and groups of shares on such share networks.

🎯 Affected products3

  • pip/manila:< 7.4.1
  • pip/manila:>= 8.0.0, < 8.1.1
  • pip/manila:>= 9.0.0, < 9.1.1

🔗 References (8)