CVE-2020-9543: Openstack Manila

High severity, CVSS 8.3. EPSS: 1.3% chance of exploitation in the next 30 days.

OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems and groups of shares on such share networks.

Affected products

• Openstack Manila: before 7.4.1 (fixed in 7.4.1); from 8.0.0, before 8.1.1 (fixed in 8.1.1); from 9.0.0, before 9.1.1 (fixed in 9.1.1)

Published 2020-03-12. Last modified 2026-06-17.