p PatchFirst

PatchFirst · Latest vulnerabilities

nova 2015.1.2: known vulnerabilities

The comparison for nova 2015.1.2 is incomplete. Review the confirmed matches below.

RSS ↗
Filter vulnerabilities
Clear filters

Could not compare 1 records. The results are incomplete.

Vulnerabilities: 1

  1. CVE-2012-3447

    Medium · CVSS 6.5EPSS 1.93%No fix published

    CVE-2012-3447

    virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image that uses a symlink that is only readable by root. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3361.

    novaPython
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →