-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| nova | pip | < 12.0.0a0 | 12.0.0a0 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from missing quota enforcement in the fixed IP allocation process. The patch adds quota checks (QUOTAS.reserve/commit) to allocate_fixed_ip in nova/network/manager.py, confirming this was the vulnerable point. The function's pre-patch version allowed unlimited fixed IP associations without tracking usage against a project quota, making it the clear attack vector. The CWE-770 (unlimited resource allocation) classification and commit diff further validate this assessment.