CVE-2012-2654

The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remote attackers to bypass intended access restrictions.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://review.openstack.org/#/c/8239/
https://github.com/openstack/nova/commit/9f9e9da777161426a6f8cb4314b78e09beac2978	Exploit Patch
https://github.com/openstack/nova/commit/ff06c7c885dc94ed7c828e8cdbb8b5d850a7e654	Exploit Patch
https://lists.launchpad.net/openstack/msg12883.html
http://www.ubuntu.com/usn/USN-1466-1
https://bugs.launchpad.net/nova/+bug/985184	Patch
http://secunia.com/advisories/49439	Vendor Advisory
http://secunia.com/advisories/46808	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/76110

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:openstack:diablo:2011.3:::::::*
	cpe:2.3:a:openstack:compute:2012.2:::::::*
	cpe:2.3:a:openstack:essex:2012.1:::::::*

Information

Published : 2012-06-21 08:55

Updated : 2017-08-28 18:31

NVD link : CVE-2012-2654

Mitre link : CVE-2012-2654

JSON object : View

CWE

CWE-20

Improper Input Validation

Products Affected

openstack

diablo
compute
essex

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://review.openstack.org/#/c/8239/", "name": "https://review.openstack.org/#/c/8239/", "tags": [], "refsource": "CONFIRM"}, {"url": "https://github.com/openstack/nova/commit/9f9e9da777161426a6f8cb4314b78e09beac2978", "name": "https://github.com/openstack/nova/commit/9f9e9da777161426a6f8cb4314b78e09beac2978", "tags": ["Exploit", "Patch"], "refsource": "CONFIRM"}, {"url": "https://github.com/openstack/nova/commit/ff06c7c885dc94ed7c828e8cdbb8b5d850a7e654", "name": "https://github.com/openstack/nova/commit/ff06c7c885dc94ed7c828e8cdbb8b5d850a7e654", "tags": ["Exploit", "Patch"], "refsource": "CONFIRM"}, {"url": "https://lists.launchpad.net/openstack/msg12883.html", "name": "[openstack] 20120606 [OSSA 2012-007] Security groups fail to be set correctly (CVE-2012-2654)", "tags": [], "refsource": "MLIST"}, {"url": "http://www.ubuntu.com/usn/USN-1466-1", "name": "USN-1466-1", "tags": [], "refsource": "UBUNTU"}, {"url": "https://bugs.launchpad.net/nova/+bug/985184", "name": "https://bugs.launchpad.net/nova/+bug/985184", "tags": ["Patch"], "refsource": "CONFIRM"}, {"url": "http://secunia.com/advisories/49439", "name": "49439", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/46808", "name": "46808", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/76110", "name": "nova-security-group-sec-bypass(76110)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remote attackers to bypass intended access restrictions."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-20"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2012-2654", "ASSIGNER": "secalert@redhat.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2012-06-21T15:55Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:openstack:diablo:2011.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:openstack:compute:2012.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:openstack:essex:2012.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-08-29T01:31Z"}

4.3 /10