Add X-Tenant-ID to metadata request
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
openstack-manuals |
Fix Released
|
High
|
Summer Long |
Bug Description
https:/
commit bd4a85d67f09138
Author: Aaron Rosen <email address hidden>
Date: Mon Oct 7 15:34:38 2013 -0700
Add X-Tenant-ID to metadata request
Previously, one could update a port's device_id to be that of
another tenant's instance_id and then be able to retrieve that
instance's metadata. In order to prevent this X-Tenant-ID is now
passed in the metadata request to nova and nova then checks that
X-Tenant-ID also matches the tenant_id for the instance against it's
database to ensure it's not being spoofed.
DocImpact - When upgrading OpenStack nova and neturon, neutron
Change-Id: I2b8fa2f561a7f2
Closes-Bug: #1235450
Changed in openstack-manuals: | |
status: | New → Confirmed |
importance: | Undecided → High |
milestone: | none → icehouse |
Changed in openstack-manuals: | |
assignee: | nobody → Summer Long (slong-g) |
Changed in openstack-manuals: | |
status: | Confirmed → Fix Released |
Summer, any update on this bug?