CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-9543

OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems and groups of shares on such share networks.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 54.7%

CVSS Severity

CVSS v3 Score 8.3

CVSS v2 Score 6.5

References

Products affected by CVE-2020-9543

Openstack » Manila » Version: 1.0.0

cpe:2.3:a:openstack:manila:1.0.0
Openstack » Manila » Version: 1.0.1

cpe:2.3:a:openstack:manila:1.0.1
Openstack » Manila » Version: 1.0.2

cpe:2.3:a:openstack:manila:1.0.2
Openstack » Manila » Version: 2.0.0

cpe:2.3:a:openstack:manila:2.0.0
Openstack » Manila » Version: 2.5

cpe:2.3:a:openstack:manila:2.5
Openstack » Manila » Version: 3.0.0

cpe:2.3:a:openstack:manila:3.0.0
Openstack » Manila » Version: 4.0.0

cpe:2.3:a:openstack:manila:4.0.0
Openstack » Manila » Version: 4.0.1

cpe:2.3:a:openstack:manila:4.0.1
Openstack » Manila » Version: 4.0.2

cpe:2.3:a:openstack:manila:4.0.2
Openstack » Manila » Version: 5.0.0

cpe:2.3:a:openstack:manila:5.0.0
Openstack » Manila » Version: 5.0.1

cpe:2.3:a:openstack:manila:5.0.1
Openstack » Manila » Version: 5.0.2

cpe:2.3:a:openstack:manila:5.0.2
Openstack » Manila » Version: 5.0.3

cpe:2.3:a:openstack:manila:5.0.3
Openstack » Manila » Version: 5.1.0

cpe:2.3:a:openstack:manila:5.1.0
Openstack » Manila » Version: 5.1.0-4

cpe:2.3:a:openstack:manila:5.1.0-4
Openstack » Manila » Version: 6.0.0

cpe:2.3:a:openstack:manila:6.0.0
Openstack » Manila » Version: 6.0.1

cpe:2.3:a:openstack:manila:6.0.1
Openstack » Manila » Version: 6.0.2

cpe:2.3:a:openstack:manila:6.0.2
Openstack » Manila » Version: 6.1.0

cpe:2.3:a:openstack:manila:6.1.0
Openstack » Manila » Version: 6.2.0

cpe:2.3:a:openstack:manila:6.2.0
Openstack » Manila » Version: 6.3.0

cpe:2.3:a:openstack:manila:6.3.0
Openstack » Manila » Version: 6.3.1

cpe:2.3:a:openstack:manila:6.3.1
Openstack » Manila » Version: 6.3.2

cpe:2.3:a:openstack:manila:6.3.2
Openstack » Manila » Version: 6.3.2-2

cpe:2.3:a:openstack:manila:6.3.2-2
Openstack » Manila » Version: 7.0.0

cpe:2.3:a:openstack:manila:7.0.0
Openstack » Manila » Version: 7.1.0

cpe:2.3:a:openstack:manila:7.1.0
Openstack » Manila » Version: 7.2.0

cpe:2.3:a:openstack:manila:7.2.0
Openstack » Manila » Version: 7.3.0

cpe:2.3:a:openstack:manila:7.3.0
Openstack » Manila » Version: 7.4.0

cpe:2.3:a:openstack:manila:7.4.0
Openstack » Manila » Version: 8.0.0

cpe:2.3:a:openstack:manila:8.0.0
Openstack » Manila » Version: 8.0.1

cpe:2.3:a:openstack:manila:8.0.1
Openstack » Manila » Version: 8.1.0

cpe:2.3:a:openstack:manila:8.1.0
Openstack » Manila » Version: 9.0.0

cpe:2.3:a:openstack:manila:9.0.0
Openstack » Manila » Version: 9.0.0-48

cpe:2.3:a:openstack:manila:9.0.0-48
Openstack » Manila » Version: 9.1.0

cpe:2.3:a:openstack:manila:9.1.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-9543

Products

Pricing

Contact Us