{"id":"CVE-2012-0030","details":"Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI parameter.","modified":"2026-04-10T03:42:09.756914Z","published":"2012-01-13T18:55:04Z","references":[{"type":"ADVISORY","url":"http://secunia.com/advisories/47543"},{"type":"ADVISORY","url":"http://www.ubuntu.com/usn/USN-1326-1"},{"type":"FIX","url":"https://github.com/openstack/nova/commit/3d4ffb64f1e18117240c26809788528979e3bd15#diff-0"},{"type":"FIX","url":"https://lists.launchpad.net/openstack/msg06648.html"},{"type":"WEB","url":"http://www.securityfocus.com/bid/51370"},{"type":"WEB","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/72296"}],"schema_version":"1.7.5"}