CVE-2012-0030

Openstack Essex - Access Control

Title source: rule

Description

Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI parameter.

References (6)

Scores

EPSS 0.0055
EPSS Percentile 67.6%

Classification

CWE
CWE-264
Status draft

Affected Products (2)

openstack/essex
openstack/nova

Timeline

Published Jan 13, 2012
Tracked Since Feb 18, 2026