Lucene search

K
nvd[email protected]NVD:CVE-2012-3361
HistoryJul 22, 2012 - 4:55 p.m.

CVE-2012-3361

2012-07-2216:55:48
CWE-264
web.nvd.nist.gov
1

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

6.1 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.1%

virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image.

Affected configurations

NVD
Node
openstackdiabloMatch2011.3
OR
openstackessexMatch2012.1
OR
openstackfolsomMatch2012.2

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

6.1 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.1%