GCVE - cpe:2.3:a:openstack:folsom:2012.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openstack:folsom:2012.2:*:*:*:*:*:*:*

part: a version: 2012.2 update: *

Vendor	Openstack (`7b0cf974-b2b5-592e-bdf4-6953805ef02a`)
Product	Folsom (`8ecdbe88-cdbc-5247-8b01-a6bebce8f3cf`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/jedipunkz/openstack_folsom_deploy`	purl2cpe	2026-06-01 10:17:03.246248

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-1865`	vulnerable	2026-06-08 05:03:56.993647	Details available OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token. Published: 2013-03-22T21:00:00.000Z Updated: 2024-08-06T15:20:37.275Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2013/03/20/13 http://secunia.com/advisories/52657 http://lists.opensuse.org/opensuse-updates/2013-04/msg00000.html http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101719.html https://bugs.launchpad.net/keystone/+bug/1129713	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1840`	not_vulnerable	2026-06-08 05:03:56.715172	Details available The v1 API in OpenStack Glance Essex (2012.1), Folsom (2012.2), and Grizzly, when using the single-tenant Swift or S3 store, reports the location field, which allows remote authenticated users to obtain the operator's backend credentials via a request for a cached image. Published: 2013-03-22T21:00:00.000Z Updated: 2024-08-06T15:13:33.277Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/82878 https://review.openstack.org/#/c/24437/ http://www.ubuntu.com/usn/USN-1764-1 https://review.openstack.org/#/c/24438/ https://bugs.launchpad.net/glance/+bug/1135541	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1838`	vulnerable	2026-06-08 05:03:56.696496	Details available OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function. Published: 2013-03-22T21:00:00.000Z Updated: 2024-08-06T15:13:33.340Z Open on db.gcve.eu Reference links https://lists.launchpad.net/openstack/msg21892.html http://www.securityfocus.com/bid/58492 https://bugs.launchpad.net/nova/+bug/1125468 http://ubuntu.com/usn/usn-1771-1 https://review.openstack.org/#/c/24453/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0335`	vulnerable	2026-06-08 05:03:47.115574	Details available OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port. Published: 2013-03-22T21:00:00.000Z Updated: 2024-08-06T14:25:09.083Z Open on db.gcve.eu Reference links http://www.osvdb.org/90657 http://secunia.com/advisories/52728 https://bugs.launchpad.net/nova/+bug/1125378 http://www.openwall.com/lists/oss-security/2013/02/26/7 https://review.openstack.org/#/c/22872/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-5625`	vulnerable	2026-06-08 05:02:57.601895	Details available OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV). Published: 2012-12-26T22:00:00.000Z Updated: 2024-08-06T21:14:16.142Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2013-0208.html https://bugs.launchpad.net/nova/+bug/1070539 http://www.ubuntu.com/usn/USN-1663-1 http://www.securityfocus.com/bid/56904 http://osvdb.org/88419	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-5571`	vulnerable	2026-06-08 05:02:57.335160	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-5563`	vulnerable	2026-06-08 05:02:57.285780	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-5482`	vulnerable	2026-06-08 05:02:56.667367	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4573`	vulnerable	2026-06-08 05:02:51.558217	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3371`	vulnerable	2026-06-08 05:02:09.390622	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3361`	vulnerable	2026-06-08 05:02:09.361015	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3360`	vulnerable	2026-06-08 05:02:09.360482	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.