USN-2248-1: OpenStack Cinder vulnerability
18 June 2014
OpenStack Cinder could be made to run programs as an administrator under certain conditions.
- cinder - OpenStack storage service
Darragh O'Reilly discovered that the Ubuntu packaging for OpenStack Cinder
did not properly set up its sudo configuration. If a different flaw was
found in OpenStack Cinder, this vulnerability could be used to escalate
- USN-2247-1: nova, python-nova