[Secure-testing-commits] r24693 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-12-11 20:58:35 +0000 (Wed, 11 Dec 2013)
New Revision: 24693

Modified:
   data/CVE/list
Log:
Add CVE-2013-6419, nova and neutron

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-12-11 20:56:53 UTC (rev 24692)
+++ data/CVE/list	2013-12-11 20:58:35 UTC (rev 24693)
@@ -2178,8 +2178,12 @@
 	RESERVED
 	- php5 <unfixed> (bug #731895)
 	NOTE: http://git.php.net/?p=php-src.git;a=commit;h=c1224573c773b6845e83505f717fbf820fc18415
-CVE-2013-6419
+CVE-2013-6419 [Metadata queries from Neutron to Nova are not restricted by tenant]
 	RESERVED
+	- neutron <unfixed>
+	- nova <unfixed>
+	NOTE: https://launchpad.net/bugs/1235450
+	TODO: check
 CVE-2013-6418
 	RESERVED
 CVE-2013-6417 (actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before ...)