Description
OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project-s QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected.
CVSS 4.3EPSS 0.208%Risk 0.44
View source- Published
- 2026-08-14 21:17:58
- Affected versions
- <=18.0.0
- Type
- Library
- Last modified
- 2026-08-17 21:16:49
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N