Boletines de Vulnerabilidades

IBM Security Bulletin: Openstack Nova vulnerability affects IBM Cloud Manager with OpenStack (CVE-2015-2687)


Información sobre el sistema

   
Software afectado IBM

Descripción

IBM Cloud Manager with OpenStack is vulnerable to an OpenStack Nova vulnerability that allows a local attacker to obtain sensitive information. CVE(s): CVE-2015-2687 Affected product(s) and affected version(s): IBM Cloud Manager with OpenStack 4.1.0 through 4.1.0.4 IBM Cloud Manager with OpenStack 4.2.0 through 4.2.0.3 IBM Cloud Manager with OpenStack 4.3.0 through 4.3.0.3 IBM SmartCloud Entry 3.1.0 through 3.1.0.4 Appliance fix pack 15 IBM SmartCloud Entry 3.2.0 through 3.2.0.4

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_openstack_nova_vulnerability_affects_ibm_cloud_manager_with_openstack_cve_2015_2687?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2015-2687 ,CVE-2015-4497 ,CVE-2015-4498 ,CVE-2014-9297 ,CVE-2014-9298 ,CVE-2015-1798 ,CVE-2015-1799 ,CVE-2015-3405 and CVE-2013-7424.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2015-11-05

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT