OpenStack Compute (nova)

  1. Bug #1235450
  2. Comment #44

Comment 44 for bug 1235450

Revision history for this message
Aaron Rosen (arosen) wrote : Re: Metadata is unsecure

Hi Jeremy, how about this:

--
Title: Metadata queries between neutron and nova are not restricted by tenant
Reporter: Aaron Rosen (VMware)
Products: Neutron / Nova
Affects: All supported releases

Description:
Aaron Rosen from VMware reported a vulnerability in the metadata access between neutron and nova . By guessing the instance_id, another tenant may retrieve its metadata resulting in potential information disclosure. Only OpenStack setups running the neturon-metadata-agent/quantum-metadata-agent are affected.
--