VYPR
← All advisories
High severityNVD Advisory· Published Mar 12, 2020· Updated Aug 4, 2024

CVE-2020-9543

CVE-2020-9543

Description

OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems and groups of shares on such share networks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
manilaPyPI
< 7.4.17.4.1
manilaPyPI
>= 8.0.0, < 8.1.18.1.1
manilaPyPI
>= 9.0.0, < 9.1.19.1.1

Affected products

202

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.