Search/CVE-2012-3447

● CVE

CVE-2012-3447

virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image that uses a symlink that is only readable by root. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3361.

View graph Watch Export

CVSS v3.1

—

EPSS

1.93%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

0

sources referencing this CVE

Connections

3 relationships

Timeline

disclosure → media coverage

Aug 20, 2012

Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026