Approved changes feed: RSS · Atom

cpe:2.3:a:openstack:folsom:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpenstack (7b0cf974-b2b5-592e-bdf4-6953805ef02a)
ProductFolsom (8ecdbe88-cdbc-5247-8b01-a6bebce8f3cf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jedipunkz/openstack_folsom_deploy purl2cpe 2026-06-01 10:17:03.246241

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4261 vulnerable 2026-06-03 14:33:10.621667 Details available
OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service (connection pool consumption), as demonstrated using multiple requests that send long strings to an instance console and retrieving the console log.
Published: 2013-10-29T22:00:00.000Z
Updated: 2024-08-06T16:38:01.569Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3447 vulnerable 2026-06-03 14:31:58.403124 Details available
virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image that uses a symlink that is only readable by root. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3361.
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-08-06T20:05:12.578Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.