CVE-2012-0030

Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI parameter.

View graph Watch Export

CVSS v3.1

—

EPSS

1.69%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

EPSS Trend

Aug 16, 2026 → Aug 29, 2026

▼ 0.06pp

1.76% → 1.69% over 2 tracked changes

Connections

3 relationships

CWE-264

source

Timeline

disclosure → media coverage

Jan 13, 2012

Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026