CVSS 3.0
4.7 mediumCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2015-2687
OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
- CWE
- CWE-284
- Published
- Modified
- Record from
- the NVD, synced
Affected
- openstack:compute
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-97fv-22hc-mrgj | PyPI | nova | <15.0.0.0b1 | 15.0.0.0b1 |
| PYSEC-2017-145 | PyPI | nova | <15.0.0.0b1 | 15.0.0.0b1 |