CVE-2012-0030 - CERT CVE
ID CVE-2012-0030
Sažetak Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI parameter.
Reference
CVSS
Base: 4.9
Impact: 4.9
Exploitability:6.8
Pristup
VektorSloženostAutentikacija
NETWORK MEDIUM SINGLE
Impact
PovjerljivostCjelovitostDostupnost
NONE PARTIAL PARTIAL
CVSS vektor AV:N/AC:M/Au:S/C:N/I:P/A:P
Zadnje važnije ažuriranje 29-08-2017 - 01:30
Objavljeno 13-01-2012 - 18:55