Openstack

Essex

15 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2012-3361

Exploit
  • EPSS 1.38%
  • Veröffentlicht 22.07.2012 16:55:48
  • Zuletzt bearbeitet 11.04.2025 00:51:21

virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image.

5.5

CVE-2012-3360

Exploit
  • EPSS 2.57%
  • Veröffentlicht 22.07.2012 16:55:45
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors, allows remote authenticated users to write arbitrary files to the disk image via a .. (dot...

3.5

CVE-2012-3371

Exploit
  • EPSS 0.88%
  • Veröffentlicht 17.07.2012 21:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of service (excessive database lookup calls and server hang)...

4.3

CVE-2012-2654

Exploit
  • EPSS 1.18%
  • Veröffentlicht 21.06.2012 15:55:12
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which al...

4.9

CVE-2012-0030

  • EPSS 0.55%
  • Veröffentlicht 13.01.2012 18:55:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI parameter.