Patchwire CVEs, their patch status, and feeds to follow them

CVE-2012-0030

Fixed in a distro release EPSS 2%

Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI parameter.

Published 2012-01-13 · CVE record · OSV

Products: openstack essex, openstack nova

Distro releases

ReleasePackageFixed in
Debian 12nova2012.1~rc1-1
Debian 13nova2012.1~rc1-1
Debian 14nova2012.1~rc1-1