CVE-2012-3360

Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors…

published July 22, 2012

CVSS
—
EPSS
3%
Percentile
87.3
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors, allows remote authenticated users to write arbitrary files to the disk image via a .. (dot dot) in the path attribute of a file element.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03022 · 87.3th percentile
Published
2012-07-22T16:00Z
EPSS history
Timeline
  • 22 JUL 16:00Z
    Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors…
    cvelistv5