Vulnerabilities > Openstack > Nova > 2010.1

DATE CVE VULNERABILITY TITLE RISK
2019-11-26 CVE-2011-4076 Information Exposure vulnerability in Openstack Nova
OpenStack Nova before 2012.1 allows someone with access to an EC2_ACCESS_KEY (equivalent to a username) to obtain the EC2_SECRET_KEY (equivalent to a password).
network
openstack CWE-200
4.3
2019-04-22 CVE-2011-3147 Information Exposure vulnerability in Openstack Nova
Versions of nova before 2012.1 could expose hypervisor host files to a guest operating system when processing a maliciously constructed qcow filesystem.
network
low complexity
openstack CWE-200
5.0