CVE-2015-2687: Openstack Compute

Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days.

OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.

Affected products

• Openstack Compute: version 2013.2 only; version 2013.2.1 only; version 2013.2.2 only; version 2013.2.3 only; version 2013.2.4 only; version 2014.1 only; …

Published 2017-08-09. Last modified 2026-06-17.