Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-CM54-3VVF-F5P8
HistoryMay 17, 2022 - 5:25 a.m.

OpenStack Nova Arbitrary file injection/corruption through directory traversal issues

2022-05-1705:25:39
GitHub Advisory Database
github.com
1

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.1%

JSON

virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image.

Affected configurations

Vulners
Node
novanovaRange<12.0.0a0
CPENameOperatorVersion
novalt12.0.0a0

Related

prion 2
nvd 2
cvelist 2
cve 2
debiancve 2
nessus 5
openvas 14
osv 1
ubuntu 2
securityvulns 3
ubuntucve 2
github 1
fedora 2
prion
prion
Design/Logic Flaw
2012-07-22 16:55:00
Design/Logic Flaw
2012-08-20 18:55:00
nvd
nvd
CVE-2012-3361
2012-07-22 16:55:48
CVE-2012-3447
2012-08-20 18:55:03
cvelist
cvelist
CVE-2012-3361
2012-07-22 16:00:00
CVE-2012-3447
2012-08-20 18:00:00
cve
cve
CVE-2012-3361
2012-07-22 16:55:48
CVE-2012-3447
2012-08-20 18:55:03
debiancve
debiancve
CVE-2012-3361
2012-07-22 16:55:48
CVE-2012-3447
2012-08-20 18:55:03
nessus
nessus
Fedora 16 : openstack-nova-2011.3.1-11.fc16 (2012-10418)
2012-07-20 00:00:00
Fedora 17 : openstack-nova-2012.1.1-3.fc17 (2012-10420)
2012-07-20 00:00:00
Fedora 17 : openstack-nova-2012.1.1-15.fc17 (2012-11756)
2012-08-22 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-1497-1)
2012-07-06 00:00:00
Ubuntu Update for nova USN-1545-1
2012-08-24 00:00:00
Ubuntu: Security Advisory (USN-1545-1)
2012-08-24 00:00:00
osv
osv
Arbitrary file overwrite in OpenStack Nova
2022-05-17 01:44:00
ubuntu
ubuntu
Nova vulnerability
2012-08-22 00:00:00
Nova vulnerabilities
2012-07-03 00:00:00
securityvulns
securityvulns
[USN-1497-1] Nova vulnerabilities
2012-07-09 00:00:00
[USN-1545-1] Nova vulnerability
2012-08-27 00:00:00
Nova security vulnerabilities
2012-08-27 00:00:00
ubuntucve
ubuntucve
CVE-2012-3447
2012-08-10 00:00:00
CVE-2012-3361
2012-07-03 00:00:00
github
github
Arbitrary file overwrite in OpenStack Nova
2022-05-17 01:44:00
fedora
fedora
[SECURITY] Fedora 16 Update: openstack-nova-2011.3.1-11.fc16
2012-07-19 09:07:01
[SECURITY] Fedora 17 Update: openstack-nova-2012.1.1-15.fc17
2012-08-21 09:53:13

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.1%

JSON
Related for GHSA-CM54-3VVF-F5P8
prion2nvd2cvelist2cve2debiancve2nessus5openvas14osv1ubuntu2securityvulns3ubuntucve2github1fedora2