NVD

Id
42179  
Name
CVE-2012-0030  
Description
Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI parameter.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-01-13  
Modified Date
2012-01-17  
Seq
2012-0030  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
212893 42179 CVE-2012-0030 51370  View
212894 42179 CVE-2012-0030 USN-1326-1  View
212895 42179 CVE-2012-0030 nova-security-bypass(72296)  View
212896 42179 CVE-2012-0030 https://github.com/openstack/nova/commit/3d4ffb64f1e18117240c26809788528979e3bd15#diff-0  View
212897 42179 CVE-2012-0030 [openstack] 20120111 [OSSA 2012-001] Tenant bypass by authenticated users using OpenStack API (CVE-2012-0030)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25351 JVNDB-2012-001058 OpenStack Compute の Nova および Essex におけるアクセス制限を回避される脆弱性 OpenStack Compute の Nova および Essex には、OpenStack API を使用している場合、他のユーザのテナントへのアクセス制限を回避される脆弱性が存在します。 CVE-2012-0030 53268 CVE-2012-0030 42179 4.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001058.html 2012-01-11 2012-01-19 View