Vendor/product archive

openstack / diablo CVEs

Beta · best-effort

2 CVEs tagged to openstack / diablo — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to openstack vendor archive

CVE-2012-3361

Published Jul 22, 2012

virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink atta…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2012-2654

Published Jun 21, 2012

The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created an…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1