CVE-2020-9543
CVE-2020-9543
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems and groups of shares on such share networks.
CVSS 8.3 · High · EPSS 1.3% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
manila Debian:12
- Affected ranges
- ECOSYSTEM: < 1:9.0.0-5
Update to 1:9.0.0-5
manila Debian:13
- Affected ranges
- ECOSYSTEM: < 1:9.0.0-5
Update to 1:9.0.0-5
manila Debian:14
- Affected ranges
- ECOSYSTEM: < 1:9.0.0-5
Update to 1:9.0.0-5
manila PyPI
- Versions
- 4.0.2
- 5.0.2
- 5.0.3
- 5.1.0
- 6.1.0
- 6.2.0
- 6.3.0
- 6.3.1
- 6.3.2
- 7.0.0
- 7.1.0
- 7.2.0
- 7.3.0
- 7.4.0
- Affected ranges
- ECOSYSTEM: < 7.4.1
Update to 7.4.1
manila PyPI
- Versions
- 8.0.0
- 8.0.1
- 8.1.0
- Affected ranges
- ECOSYSTEM: ≥ 8.0.0, < 8.1.1
Update to 8.1.1
manila PyPI
- Versions
- 9.0.0
- 9.1.0
- Affected ranges
- ECOSYSTEM: ≥ 9.0.0, < 9.1.1
Update to 9.1.1
manila PyPI
- Versions
- 4.0.2
- 5.0.2
- 5.0.3
- 5.1.0
- 6.1.0
- 6.2.0
- 6.3.0
- 6.3.1
- 6.3.2
- 7.0.0
- 7.1.0
- 7.2.0
- 7.3.0
- 7.4.0
- 8.0.0
- 8.0.1
- 8.1.0
- 9.0.0
- 9.1.0
- Affected ranges
- ECOSYSTEM: < 7.4.1 ∪ ≥ 8.0.0, < 8.1.1 ∪ ≥ 9.0.0, < 9.1.1
Update to 7.4.1; Update to 8.1.1; Update to 9.1.1
manila Ubuntu:16.04:LTS
- Versions
- 1:1.0.0-0ubuntu1
- 1:2.0.0~b1-0ubuntu1
- 1:2.0.0~b2-0ubuntu1
- 1:2.0.0~b3-0ubuntu1
- 1:2.0.0~rc1-0ubuntu1
- 1:2.0.0-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
manila Ubuntu:18.04:LTS
- Versions
- 1:5.0.0-0ubuntu1
- 1:6.0.0~b2-0ubuntu1
- 1:6.0.0~b3-0ubuntu1
- 1:6.0.0~rc1-0ubuntu1
- 1:6.0.0~rc2-0ubuntu1
- 1:6.0.0~rc3-0ubuntu1
- 1:6.0.0-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published