Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2012-3361

virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image.

  • Published: Jul 22, 2012
  • Updated: Apr 13, 2023
  • CVE: CVE-2012-3361
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5.5
  • AV:N/AC:L/Au:S/C:N/I:P/A:P

CWEs:

Software From Fixed in
openstack / essex 2012.1 2012.1.x
openstack / folsom 2012.2 2012.2.x
openstack / diablo 2011.3 2011.3.x