CVE-2013-6419: OpenStack Nova Router metadata queries are not restricted by tenant
(updated )
Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by (1) api/metadata/handler.py in Nova and (2) the neutron-metadata-agent (agent/metadata/agent.py) in Neutron.
References
- bugs.launchpad.net/neutron/+bug/1235450
- github.com/advisories/GHSA-22w9-j288-8p9w
- github.com/openstack/nova
- github.com/openstack/nova/commit/07006be9165d1008ca0382b6f0ad25b13a676a55
- github.com/openstack/nova/commit/af2f823107010933ecd94a9c938f8b739baaecb7
- github.com/openstack/nova/commit/bce36e9bdb1fcb9658f7b684d160e656e88d816c
- nvd.nist.gov/vuln/detail/CVE-2013-6419
- review.openstack.org/
- review.openstack.org/
Code Behaviors & Features
Detect and mitigate CVE-2013-6419 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →