PT-2012-4163
CVE-2012-2654
·
Publicado
2012-06-21
·
Atualizado
2022-05-17
Descrição por
CVSS 2.0
4.3
MédiaMétricasAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
OpenStack Compute (Nova) versions 2011.3 through 2012.2
Description
The issue allows remote attackers to bypass intended access restrictions due to improper protocol checking when security groups are created and the network protocol is not specified entirely in lowercase.
Recommendations
For OpenStack Compute (Nova) versions 2011.3 through 2012.2, consider updating to a version that properly checks the protocol when security groups are created to prevent bypassing of intended access restrictions.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾