p PatchFirst

CVE-2012-0030

CVE-2012-0030

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI parameter.

EPSS 1.7% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • nova Debian:12

    Affected ranges
    • ECOSYSTEM: < 2012.1~rc1-1

    Update to 2012.1~rc1-1

  • nova Debian:13

    Affected ranges
    • ECOSYSTEM: < 2012.1~rc1-1

    Update to 2012.1~rc1-1

  • nova Debian:14

    Affected ranges
    • ECOSYSTEM: < 2012.1~rc1-1

    Update to 2012.1~rc1-1

Original sources

Check your server →