Vulnetix
Try Vulnetix Request Demo
CVE-2020-9543 PUBLISHED

OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems and groups of shares on such share networks.

EPSS 0.27% · 50.4th percentile

Risk Scores

EPSS Score
0.27%
50.4th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSmanila1:6.0.0-0ubuntu1, 0, 1:5.0.0-0ubuntu1
Ubuntu:16.04:LTSmanila1:1.0.0-0ubuntu1, 1:2.0.0~b1-0ubuntu1, 1:2.0.0~b2-0ubuntu1

Timeline

References

Open in Interactive Console →