GCVE - cpe:2.3:a:openstack:folsom:2012.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openstack:folsom:2012.2:*:*:*:*:*:*:*

part: a version: 2012.2 update: *

Vendor	Openstack (`7b0cf974-b2b5-592e-bdf4-6953805ef02a`)
Product	Folsom (`8ecdbe88-cdbc-5247-8b01-a6bebce8f3cf`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/jedipunkz/openstack_folsom_deploy`	purl2cpe	2026-06-01 10:17:03.246248

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-1865`	vulnerable	2026-06-08 05:03:56.993647	Details available OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token. Published: 2013-03-22T21:00:00.000Z Updated: 2024-08-06T15:20:37.275Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2013/03/20/13 http://secunia.com/advisories/52657 http://lists.opensuse.org/opensuse-updates/2013-04/msg00000.html http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101719.html https://bugs.launchpad.net/keystone/+bug/1129713	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1840`	not_vulnerable	2026-06-08 05:03:56.715172	Openstack glance: swift: s3: openstack glance: information disclosure of backend credentials via cached image request MEDIUM (6.5) A flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerability by requesting a cached image when the single-tenant Swift or S3 store is in use. This action causes the system to report the location field, which can lead to the disclosure of the operator's backend credentials. Published: 2013-03-22T21:00:00.000Z Updated: 2026-10-30T18:03:59.725Z Open on db.gcve.eu Reference links http://osvdb.org/91304 http://rhn.redhat.com/errata/RHSA-2013-0707.html http://secunia.com/advisories/52565 http://www.openwall.com/lists/oss-security/2013/03/14/15 http://www.securityfocus.com/bid/58490	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1838`	vulnerable	2026-06-08 05:03:56.696496	Details available OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function. Published: 2013-03-22T21:00:00.000Z Updated: 2024-08-06T15:13:33.340Z Open on db.gcve.eu Reference links https://lists.launchpad.net/openstack/msg21892.html http://www.securityfocus.com/bid/58492 https://bugs.launchpad.net/nova/+bug/1125468 http://ubuntu.com/usn/usn-1771-1 https://review.openstack.org/#/c/24453/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0335`	vulnerable	2026-06-08 05:03:47.115574	Openstack nova: vnc proxy can connect to the wrong vm HIGH (7.6) OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port. Published: 2013-03-22T21:00:00.000Z Updated: 2026-07-31T14:23:16.683Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2013-0709.html http://secunia.com/advisories/52337 http://secunia.com/advisories/52728 http://www.openwall.com/lists/oss-security/2013/02/26/7 http://www.osvdb.org/90657	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-5625`	vulnerable	2026-06-08 05:02:57.601895	Openstack nova: information leak in libvirt lvm-backed instances MEDIUM (6.5) OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading the memory of the previous logical volume (LV). Published: 2012-12-26T22:00:00.000Z Updated: 2026-10-30T18:03:44.974Z Open on db.gcve.eu Reference links http://osvdb.org/88419 http://rhn.redhat.com/errata/RHSA-2013-0208.html http://www.openwall.com/lists/oss-security/2012/12/11/5 http://www.securityfocus.com/bid/56904 http://www.ubuntu.com/usn/USN-1663-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-5571`	vulnerable	2026-06-08 05:02:57.335160	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-5563`	vulnerable	2026-06-08 05:02:57.285780	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-5482`	vulnerable	2026-06-08 05:02:56.667367	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4573`	vulnerable	2026-06-08 05:02:51.558217	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3371`	vulnerable	2026-06-08 05:02:09.390622	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3361`	vulnerable	2026-06-08 05:02:09.361015	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3360`	vulnerable	2026-06-08 05:02:09.360482	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

OpenStack Folsom 2012.2

Notes

PURL mappings

Vulnerability references

Contribute