PT-2020-12300

CVE-2020-10731

Published

2020-07-31

Updated

2021-10-19

Description by

CVSS 3.1

9.9

Critical

MetricsAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Red Hat OpenStack Platform version 16

Description A flaw was found in the nova libvirt container where it does not have SELinux enabled, causing sVirt, an important isolation mechanism, to be disabled for all running virtual machines.

Recommendations For Red Hat OpenStack Platform version 16, enable SELinux in the nova libvirt container to mitigate the issue. As a temporary workaround, consider restricting access to sensitive virtual machines until SELinux can be enabled.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-284: Improper Access Control

Related identifiers

CVE-2020-10731

RHSA-2020:3199

RHSA-2020:3406