CVSS 3.1
8.3 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:LCVE-2020-9543
High (8.3) in openstack manila. EPSS 1.3% chance of exploitation in the next 30 days. Fixed in manila 7.4.1, 8.1.1, 9.1.1.
OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems and groups of shares on such share networks.
Severity
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
- CWE
- CWE-276
- Published
- Modified
- Record from
- the NVD, synced
Affected
- openstack:manila
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-jx7v-gmqc-6xrj | PyPI | manila | <7.4.1 | 7.4.1 |
| GHSA-jx7v-gmqc-6xrj | PyPI | manila | >=8.0.0 <8.1.1 | 8.1.1 |
| GHSA-jx7v-gmqc-6xrj | PyPI | manila | >=9.0.0 <9.1.1 | 9.1.1 |
| PYSEC-2020-63 | PyPI | manila | <7.4.1 >=8.0.0 <8.1.1 >=9.0.0 <9.1.1 | 7.4.1, 8.1.1, 9.1.1 |