CVE-2012-3361

Fixed in a distro release EPSS 3%

virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image.

Published 2012-07-22 · CVE record · OSV

Products: openstack diablo, openstack essex, openstack folsom

Fixed upstream

Distro releases