Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2012-0030
HistoryJan 13, 2012 - 6:55 p.m.

CVE-2012-0030

2012-01-1318:55:04
Debian Security Bug Tracker
security-tracker.debian.org
10

4.9 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:P/A:P

0.004 Low

EPSS

Percentile

72.8%

Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI parameter.

4.9 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:P/A:P

0.004 Low

EPSS

Percentile

72.8%