CVE-2012-0030: Openstack Essex

Medium severity, CVSS 4.9. EPSS: 1.7% chance of exploitation in the next 30 days.

Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI parameter.

Affected products

• Openstack Essex: any version
• Openstack Nova: version 2011.3 only

Published 2012-01-13. Last modified 2026-06-16.