Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-0335
HistoryMar 22, 2013 - 9:55 p.m.

CVE-2013-0335

2013-03-2221:55:00
CWE-264
[email protected]
web.nvd.nist.gov
35
openstack
nova
vulnerability
remote access
cve-2013-0335
nvd

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

6.4 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.5%

JSON

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.

Affected configurations

NVD
Node
openstackessexMatch2012.1
OR
openstackfolsomMatch2012.2
OR
openstackgrizzlyMatch2012.2
Node
canonicalubuntu_linuxMatch11.10
OR
canonicalubuntu_linuxMatch12.04-lts
OR
canonicalubuntu_linuxMatch12.10

Related

ubuntucve 1
prion 1
nvd 1
seebug 1
debiancve 1
github 1
veracode 2
cvelist 1
redhat 1
securityvulns 2
ubuntu 1
nessus 2
openvas 1
ubuntucve
ubuntucve
CVE-2013-0335
2013-02-26 00:00:00
prion
prion
Design/Logic Flaw
2013-03-22 21:55:00
nvd
nvd
CVE-2013-0335
2013-03-22 21:55:00
seebug
seebug
OpenStack Nova 安全绕过漏洞(CVE-2013-0335)
2013-02-28 00:00:00
debiancve
debiancve
CVE-2013-0335
2013-03-22 21:55:00
github
github
OpenStack Compute Nova Unauthorised access to arbitrary VM using VNC token from deleted VM
2022-05-05 02:48:49
veracode
veracode
Authorization Bypass
2019-01-15 08:51:29
Denial Of Service (DoS)
2019-05-02 04:54:31
cvelist
cvelist
CVE-2013-0335
2013-03-22 21:00:00
redhat
redhat
(RHSA-2013:0709) Moderate: openstack-nova security and bug fix update
2013-04-04 00:00:00
securityvulns
securityvulns
[USN-1771-1] OpenStack Nova vulnerabilities
2013-03-24 00:00:00
OpenStack security vulnerabilities
2013-03-24 00:00:00
ubuntu
ubuntu
OpenStack Nova vulnerabilities
2013-03-20 00:00:00
nessus
nessus
Ubuntu 11.10 / 12.04 LTS / 12.10 : nova vulnerabilities (USN-1771-1)
2013-03-21 00:00:00
openSUSE Security Update : openstack (openSUSE-2013-237)
2014-06-13 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-1771-1)
2022-08-26 00:00:00

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

6.4 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.5%

JSON
Related for CVE-2013-0335
ubuntucve1prion1nvd1seebug1debiancve1github1veracode2cvelist1redhat1securityvulns2ubuntu1nessus2openvas1