CVE-2013-4497: The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly...

Security readout for executives and security teams

This flaw can cause OpenStack Nova security group rules to be skipped in XenAPI-backed clouds during instance resize or live migration. That can let a remote attacker reach services that operators intended to block. The issue is old, but still matters for legacy private clouds. Exposure is likely limited to legacy OpenStack Nova deployments using XenAPI on Folsom, Grizzly, or Havana before 2013.2. Deployments using other hypervisor backends are not identified as affected in the provided sources. Prioritize if the organization still operates legacy OpenStack XenAPI infrastructure. For modern or non-XenAPI environments, urgency is lower, but asset owners should verify rather than assume non-exposure. Mitigation focus: Upgrade affected Nova deployments to 2013.2 or later where applicable.; Check OpenStack or distribution vendor guidance for supported patches or backports.; Inventory XenAPI-backed Nova cells still running Folsom, Grizzly, or early Havana..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.