CyberRota Analysis
AI-GeneratedOpenStack Octavia versions up to 18.0.0 are vulnerable due to improper handling of quality of service (QoS) policy authorization, allowing authenticated users to associate a different project's QoS policy with an amphora, thereby preventing its deletion. This could lead to unauthorized control over QoS policies, impacting service management and resource allocation. All Octavia deployments should prioritize addressing this vulnerability to maintain proper policy governance and system integrity.
Original NVD Description
OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected.