Unrated severityNVD Advisory· Published Jan 13, 2012· Updated Apr 29, 2026

CVE-2012-0030

Description

Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI parameter.

Affected products

OpenStack/Essex
cpe:2.3:a:openstack:essex:*:*:*:*:*:*:*:*
OpenStack/Nova
cpe:2.3:a:openstack:nova:2011.3:*:*:*:*:*:*:*

Patches

3d4ffb64f1e1

https://github.com/openstack/novavia osv

commit

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

lists.launchpad.net/openstack/msg06648.htmlnvdPatch
secunia.com/advisories/47543nvdVendor Advisory
www.securityfocus.com/bid/51370nvd
www.ubuntu.com/usn/USN-1326-1nvd
exchange.xforce.ibmcloud.com/vulnerabilities/72296nvd
github.com/openstack/nova/commit/3d4ffb64f1e18117240c26809788528979e3bd15nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000