https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:29:56.716405+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2013-6419 CVE-2013-6419 2026-10-03T09:29:56.718206+00:00

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by (1) api/metadata/handler.py in Nova and (2) the neutron-metadata-agent (agent/metadata/agent.py) in Neutron.

 https://cve.radiocsirt.org/vuln/ghsa-22w9-j288-8p9w GHSA-22w9-j288-8p9w — OpenStack Nova Router metadata queries are not restricted by tenant 2026-10-03T09:29:56.718254+00:00

Affected: PyPI: nova

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by (1) api/metadata/handler.py in Nova and (2) the neutron-metadata-agent (`agent/metadata/agent.py`) in Neutron.