Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-QR62-R9XC-R2GJ
HistoryMay 14, 2022 - 1:58 a.m.

OpenStack Nova Multiple directory traversal vulnerabilities

2022-05-1401:58:50
CWE-22
GitHub Advisory Database
github.com
8
openstack
nova
directory traversal

CVSS2

6

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.005

Percentile

76.7%

JSON

Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.

Affected configurations

Vulners
Node
novanovaRange<12.0.0a0

Related

cvelist 1
securityvulns 1
prion 1
nvd 1
openvas 8
cve 1
nessus 3
ubuntu 1
ubuntucve 1
debiancve 1
cvelist
cvelist
CVE-2011-4596
2011-12-23 22:00:00
securityvulns
securityvulns
Nova unauthroized access
2011-12-19 00:00:00
prion
prion
Directory traversal
2011-12-23 22:55:00
nvd
nvd
CVE-2011-4596
2011-12-23 22:55:00
openvas
openvas
Ubuntu: Security Advisory (USN-1305-1)
2012-03-16 00:00:00
Ubuntu Update for nova USN-1305-1
2012-03-16 00:00:00
Fedora Update for openstack-nova FEDORA-2011-17111
2012-04-02 00:00:00
cve
cve
CVE-2011-4596
2011-12-23 22:55:00
nessus
nessus
Ubuntu 11.10 : nova vulnerability (USN-1305-1)
2011-12-14 00:00:00
Fedora 16 : openstack-nova-2011.3-13.fc16 (2011-17111)
2011-12-23 00:00:00
Fedora 16 : openstack-nova-2011.3.1-0.4.10818.fc16 (2012-0682)
2012-01-20 00:00:00
ubuntu
ubuntu
Nova vulnerability
2011-12-13 00:00:00
ubuntucve
ubuntucve
CVE-2011-4596
2011-12-13 00:00:00
debiancve
debiancve
CVE-2011-4596
2011-12-23 22:55:00

CVSS2

6

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.005

Percentile

76.7%

JSON
Related for GHSA-QR62-R9XC-R2GJ
cvelist1securityvulns1prion1nvd1openvas8cve1nessus3ubuntu1ubuntucve1debiancve1