Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2012-2654

The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remote attackers to bypass intended access restrictions.

  • Published: Jun 21, 2012
  • Updated: Apr 13, 2023
  • CVE: CVE-2012-2654
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

Software From Fixed in
openstack / compute 2012.2 2012.2.x
openstack / essex 2012.1 2012.1.x
openstack / diablo 2011.3 2011.3.x