PT-2012-4163
CVE-2012-2654
·
تاريخ النشر
2012-06-21
·
تاريخ التحديث
2022-05-17
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
OpenStack Compute (Nova) versions 2011.3 through 2012.2
Description
The issue allows remote attackers to bypass intended access restrictions due to improper protocol checking when security groups are created and the network protocol is not specified entirely in lowercase.
Recommendations
For OpenStack Compute (Nova) versions 2011.3 through 2012.2, consider updating to a version that properly checks the protocol when security groups are created to prevent bypassing of intended access restrictions.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾