Search/CVE-2012-2654

● CVE

CVE-2012-2654

The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remote attackers to bypass intended access restrictions.

View graph Watch Export

CVSS v3.1

—

EPSS

2.63%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

0

sources referencing this CVE

Connections

4 relationships

Timeline

disclosure → media coverage

Jun 21, 2012

Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026