ubuntu · CVE-2012-0030

Quick triage

Priority: medium Published: 2012-01-11 15:00:00 UTC Updated: 2024-07-24 15:57:39 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2012-0030 medium priority: Ubuntu including 1 source packages (nova), 6 status rows across 6 suites (hardy, lucid, maverick, natty, oneiric, upstream): DNE 2, not-affected 2, needs-triage 1, released 1.

Description:

Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI parameter.

cvelogic Threat Intelligence