Comment 49 for bug 1243327

Revision history for this message
Aaron Rosen (arosen) wrote : Re: Routers can be cross plugged by other tenants (CVE-2014-0056)

Thanks guys,

@Akihiro - Right it's possible for a router to be created that matches the uuid of another tenants router later down the road. That said this is pretty much impossible to occur though I think we should probably address this anyways after we merge this. I thought about this case and the reason I didn't address it here is we would need something that would regenerate uuid's on routers if there was a conflict similar to mac_addresses (which isn't possible today as some backends generate their uuid's themselves).

Ship it!