What is GHSA-qr62-r9xc-r2gj?

GHSA-qr62-r9xc-r2gj is a security advisory published by GitHub Security Advisories with Medium severity. OpenStack Nova Multiple directory traversal vulnerabilities

Which CVE IDs does GHSA-qr62-r9xc-r2gj cover?

GHSA-qr62-r9xc-r2gj covers the following CVE IDs: CVE-2011-4596. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-qr62-r9xc-r2gj?

GHSA-qr62-r9xc-r2gj affects 1 product, including: pip/nova:\u003c 12.0.0a0.

GHSA-qr62-r9xc-r2gjMedium

OpenStack Nova Multiple directory traversal vulnerabilities

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

May 14, 2024

🔗 CVE IDs covered (1)

CVE-2011-4596 →

📋 Description

Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.

🎯 Affected products1

pip/nova:< 12.0.0a0

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2011-4596
https://github.com/openstack/nova/commit/76363226bd8533256f7795bba358d7f4b8a6c9e6
https://github.com/openstack/nova/commit/ad3241929ea00569c74505ed002208ce360c667e
https://bugs.launchpad.net/nova/+bug/885167
https://bugs.launchpad.net/nova/+bug/894755
https://lists.launchpad.net/openstack/msg06105.html
https://github.com/advisories/GHSA-qr62-r9xc-r2gj