Openstack Diablo vulnerabilities

2 CVEs affecting Openstack Diablo, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-3361, published 2012-07-22.

More from Openstack.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-2654, published 2012-06-21. Medium severity, CVSS 4.3. EPSS: 2.6% chance of exploitation in the next 30 days. The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network…
• CVE-2012-3361, published 2012-07-22. Medium severity, CVSS 5.5. EPSS: 2.6% chance of exploitation in the next 30 days. virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an…