So is HP right for the company? I couldn't tell from the launchpad page..
Attempt #2
----
Title: Live migration can leak root disk into ephemeral storage
Reporter: Loganathan Parthipan
Products: Nova
Affects: All supported versions
Description:
Loganathan Parthipan from Hewlett Packard reported a vulnerability in the Nova libvirt driver. By spawning a server with the same flavor as another users migrated virtual machine an authenticated user can potentially access that users snapshot content resulting in information leakage. Only setups using KVM live block migration are affected.
Thanks ttx. Great feedback.
So is HP right for the company? I couldn't tell from the launchpad page..
Attempt #2
----
Title: Live migration can leak root disk into ephemeral storage
Reporter: Loganathan Parthipan
Products: Nova
Affects: All supported versions
Description:
Loganathan Parthipan from Hewlett Packard reported a vulnerability in the Nova libvirt driver. By spawning a server with the same flavor as another users migrated virtual machine an authenticated user can potentially access that users snapshot content resulting in information leakage. Only setups using KVM live block migration are affected.