PT-2011-5002

CVE-2011-4596

·

Published

2011-12-23

·

Updated

2026-07-06

Description by

CVSS 2.0
6.0
Medium
MetricsAV:N/AC:M/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions OpenStack Nova versions prior to 2011.3.1
Description The issue allows remote authenticated users to overwrite arbitrary files via a crafted tarball or manifest when the EC2 API and the S3/RegisterImage image-registration method are enabled.
Recommendations For versions prior to 2011.3.1, update to version 2011.3.1 or later to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2011-4596
GHSA-QR62-R9XC-R2GJ
PYSEC-2026-881
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com