Skip to content
OpenAdvisories

Vendor

nova

1 known vulnerabilities.

Products

nova 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2011-4076

    OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor

    OpenStack Nova before 2012.1 allows someone with access to an EC2_ACCESS_KEY (equivalent to a username) to obtain the EC2_SECRET_KEY (equivalent to a password). Exposing the EC2_ACCESS_KEY via http or tools that allow man-in-the-middle over https could allow …

    nova nova nova nova Debian PyPI