Homepage

nova@28.3.1 vulnerabilities

Cloud computing fabric controller

  • latest version

    31.0.0

  • latest non vulnerable version

    31.0.0

  • first published

    6 years ago

  • latest version published

    20 days ago

  • licenses detected

  • View nova package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the nova package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Exposure of Sensitive Information to an Unauthorized Actor

    nova is an OpenStack Nova provides a cloud computing fabric controller, supporting a wide variety of compute technologies, including: libvirt (KVM, Xen, LXC and more), Hyper-V, VMware, XenServer, OpenStack Ironic and PowerVM.

    Affected versions of this package are vulnerable to Exposure of Sensitive Information to an Unauthorized Actor due to improper input validation. An attacker can access sensitive data by supplying a specially crafted image that masquerades as a different format, which then references files on the server.

    How to fix Exposure of Sensitive Information to an Unauthorized Actor?

    Upgrade nova to version 29.2.0 or higher.

    [,29.2.0)
    Go back to all versions of this package