CVE-2012-2654: OpenStack Compute (Nova) Improper Input… (CVSS 4.3)

NVD Score used 4.3

The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remote attackers to bypass intended access restrictions.

Record: CVE-2012-2654
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remote attackers to bypass intended access restrictions.

Record: CVE-2012-2654
Updated: 2026-11-02

EUVDEUVD-2012-0020 No score

The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remote attackers to bypass intended access restrictions.

Record: EUVD-2012-0020
Updated: 2026-11-03

GitHub AdvisoriesGHSA-46r8-9cj7-pw6g No score

OpenStack Compute (Nova) Improper Input Validation

The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remote attackers to bypass intended access restrictions.

Record: GHSA-46r8-9cj7-pw6g
Weakness: CWE-20
Updated: 2026-11-02

OSV No score

The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remote attackers to bypass intended access restrictions.

Record: CVE-2012-2654
Updated: 2026-11-02

OSVDEBIAN-CVE-2012-2654 No score

The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remote attackers to bypass intended access restrictions.

Record: DEBIAN-CVE-2012-2654
Updated: 2026-11-02

OSVGHSA-46r8-9cj7-pw6g No score

OpenStack Compute (Nova) Improper Input Validation

The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remote attackers to bypass intended access restrictions.

Record: GHSA-46r8-9cj7-pw6g
Weakness: CWE-20
Updated: 2026-11-02

OSVPYSEC-2012-37 No score

The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remote attackers to bypass intended access restrictions.

Record: PYSEC-2012-37
Updated: 2026-11-02

Package	Affected	Fixed
`nova` PyPI	before 12.0.0a0	12.0.0a0
`nova` Debian:12	before 2012.1-6	2012.1-6
`nova` Debian:13	before 2012.1-6	2012.1-6
`nova` Debian:14	before 2012.1-6	2012.1-6

When	Changed	Sources
2026-11-03	affected
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

CVE-2012-2654

Exploit likelihood

What each source reports

Affected products

Affected packages

History

References