PT-2019-6686 · Openstack · Openstack Nova

Jamie Strandboge · Published 2019-11-26 · Updated 2022-04-22 · CVE-2011-4076

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenStack Nova versions prior to 2012.1

Description The issue allows someone with access to an EC2 ACCESS KEY (equivalent to a username) to obtain the EC2 SECRET KEY (equivalent to a password). Exposing the EC2 ACCESS KEY via http or tools that allow man-in-the-middle over https could allow an attacker to easily obtain the EC2 SECRET KEY. An attacker could also presumably brute force values for EC2 ACCESS KEY.

Recommendations For OpenStack Nova versions prior to 2012.1, update to version 2012.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the EC2 ACCESS KEY and EC2 SECRET KEY to minimize the risk of exploitation. Avoid using http for transmitting EC2 ACCESS KEY and consider using secure communication protocols to protect against man-in-the-middle attacks.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2011-4076

GHSA-VCMV-6RXX-FH7R

Affected Products

Openstack Nova

References · 12

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4076 · Exploit
• 🔥 https://bugs.launchpad.net/nova/+bug/868360 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-4076 · Security Note
• https://openwall.com/lists/oss-security/2011/10/25/4 · Patch
• https://security-tracker.debian.org/tracker/CVE-2011-4076 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-4076 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-4076 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vcmv-6rxx-fh7r · Vendor Advisory
• https://github.com/openstack/nova/commit/b1ab6da1495784ff581000018a6047fd19cf82c4 · Note
• https://github.com/openstack/nova/commit/beee11edbfdd82cd81bc9c0fd75912c167892c2b · Note
• https://access.redhat.com/security/cve/cve-2011-4076 · Note
• https://t.me/cibsecurity/8316 · Telegram Post