GCVE - cpe:2.3:a:openstack:essex:2012.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openstack:essex:2012.1:*:*:*:*:*:*:*

part: a version: 2012.1 update: *

Vendor	Openstack (`7b0cf974-b2b5-592e-bdf4-6953805ef02a`)
Product	Essex (`61f777ff-05c8-5c2c-995e-0e3fb7be3b38`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-1840`	not_vulnerable	2026-06-08 05:03:56.715140	Details available The v1 API in OpenStack Glance Essex (2012.1), Folsom (2012.2), and Grizzly, when using the single-tenant Swift or S3 store, reports the location field, which allows remote authenticated users to obtain the operator's backend credentials via a request for a cached image. Published: 2013-03-22T21:00:00.000Z Updated: 2024-08-06T15:13:33.277Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/82878 https://review.openstack.org/#/c/24437/ http://www.ubuntu.com/usn/USN-1764-1 https://review.openstack.org/#/c/24438/ https://bugs.launchpad.net/glance/+bug/1135541	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1838`	vulnerable	2026-06-08 05:03:56.696472	Details available OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function. Published: 2013-03-22T21:00:00.000Z Updated: 2024-08-06T15:13:33.340Z Open on db.gcve.eu Reference links https://lists.launchpad.net/openstack/msg21892.html http://www.securityfocus.com/bid/58492 https://bugs.launchpad.net/nova/+bug/1125468 http://ubuntu.com/usn/usn-1771-1 https://review.openstack.org/#/c/24453/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0335`	vulnerable	2026-06-08 05:03:47.114985	Details available OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port. Published: 2013-03-22T21:00:00.000Z Updated: 2024-08-06T14:25:09.083Z Open on db.gcve.eu Reference links http://www.osvdb.org/90657 http://secunia.com/advisories/52728 https://bugs.launchpad.net/nova/+bug/1125378 http://www.openwall.com/lists/oss-security/2013/02/26/7 https://review.openstack.org/#/c/22872/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-5571`	vulnerable	2026-06-08 05:02:57.335113	Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling MEDIUM (5.4) A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone does not properly handle EC2 (Elastic Compute Cloud) tokens when a user's role has been removed from a tenant. An attacker can leverage a token associated with a removed user role to gain unauthorized access. Published: 2012-12-18T01:00:00.000Z Updated: 2026-04-07T06:55:17.789Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094286.html http://rhn.redhat.com/errata/RHSA-2012-1556.html http://rhn.redhat.com/errata/RHSA-2012-1557.html http://secunia.com/advisories/51423 http://secunia.com/advisories/51436	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-5482`	vulnerable	2026-06-08 05:02:56.667343	Details available The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4573. Published: 2012-11-11T11:00:00.000Z Updated: 2024-08-06T21:05:47.269Z Open on db.gcve.eu Reference links http://secunia.com/advisories/51174 https://github.com/openstack/glance/commit/b591304b8980d8aca8fa6cda9ea1621aca000c88 http://www.openwall.com/lists/oss-security/2012/11/08/2 https://bugs.launchpad.net/glance/+bug/1076506 http://www.securityfocus.com/bid/56437	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4573`	vulnerable	2026-06-08 05:02:51.557432	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3542`	vulnerable	2026-06-08 05:02:10.585512	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3371`	vulnerable	2026-06-08 05:02:09.390601	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3361`	vulnerable	2026-06-08 05:02:09.360996	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3360`	vulnerable	2026-06-08 05:02:09.359406	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2654`	vulnerable	2026-06-08 05:02:05.188851	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.