{"id":"CVE-2011-4076","aliases":["DEBIAN-CVE-2011-4076","EUVD-2022-1837","GHSA-vcmv-6rxx-fh7r","PYSEC-2026-691"],"status":"published","title":"OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor","description":"OpenStack Nova before 2012.1 allows someone with access to an EC2_ACCESS_KEY (equivalent to a username) to obtain the EC2_SECRET_KEY (equivalent to a password). Exposing the EC2_ACCESS_KEY via http or tools that allow man-in-the-middle over https could allow an attacker to easily obtain the EC2_SECRET_KEY. An attacker could also presumably brute force values for EC2_ACCESS_KEY.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01458,"percentile":0.73712,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2019-11-26T03:53:58Z","modified":"2026-10-23T18:03:44Z","fixes":[{"ecosystem":"PyPI","package":"nova","fixed_in":["12.0.0a0"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"nova","fixed_in":["2012.1~e1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nova","fixed_in":["2012.1~e1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nova","fixed_in":["2012.1~e1-1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0a0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2012.1~e1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2012.1~e1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2012.1~e1-1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0a0"}]}]},{"source":"osv","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0a0"}]}]}],"products":[{"vendor":"nova","product":"nova"},{"vendor":"openstack","product":"nova"}],"references":[{"url":"https://security-tracker.debian.org/tracker/CVE-2011-4076","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4076","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","advisory","evidence","report","web"]},{"url":"https://access.redhat.com/security/cve/cve-2011-4076","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://bugs.launchpad.net/nova/+bug/868360","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","advisory","evidence","fix","report","web"]},{"url":"https://www.openwall.com/lists/oss-security/2011/10/25/4","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","advisory","article","fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4076","tags":["advisory"]},{"url":"https://github.com/openstack/nova/commit/b1ab6da1495784ff581000018a6047fd19cf82c4","tags":["web"]},{"url":"https://github.com/openstack/nova/commit/beee11edbfdd82cd81bc9c0fd75912c167892c2b","tags":["web"]},{"url":"https://github.com/advisories/GHSA-vcmv-6rxx-fh7r","tags":["advisory"]},{"url":"https://pypi.org/project/nova","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2011-4076","description":"OpenStack Nova before 2012.1 allows someone with access to an EC2_ACCESS_KEY (equivalent to a username) to obtain the EC2_SECRET_KEY (equivalent to a password). Exposing the EC2_ACCESS_KEY via http or tools that allow man-in-the-middle over https could allow an attacker to easily obtain the EC2_SECRET_KEY. An attacker could also presumably brute force values for EC2_ACCESS_KEY.","status":"published","published":"2019-11-26T03:53:58Z","modified":"2024-08-06T23:53:32.881Z","updated_at":"2026-11-02T14:35:37.989579Z"}],"euvd":[{"id":"EUVD-2022-1837","description":"OpenStack Nova before 2012.1 allows someone with access to an EC2_ACCESS_KEY (equivalent to a username) to obtain the EC2_SECRET_KEY (equivalent to a password). Exposing the EC2_ACCESS_KEY via http or tools that allow man-in-the-middle over https could allow an attacker to easily obtain the EC2_SECRET_KEY. An attacker could also presumably brute force values for EC2_ACCESS_KEY.","status":"published","published":"2019-11-26T03:53:58Z","modified":"2024-08-06T23:53:32Z","updated_at":"2026-11-03T01:39:49.868954Z"}],"ghsa":[{"id":"GHSA-vcmv-6rxx-fh7r","title":"OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor","description":"OpenStack Nova before 2012.1 allows someone with access to an EC2_ACCESS_KEY (equivalent to a username) to obtain the EC2_SECRET_KEY (equivalent to a password). Exposing the EC2_ACCESS_KEY via http or tools that allow man-in-the-middle over https could allow an attacker to easily obtain the EC2_SECRET_KEY. An attacker could also presumably brute force values for EC2_ACCESS_KEY.","status":"published","published":"2022-04-22T00:24:18Z","modified":"2024-05-08T19:51:56Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:37:48.08826Z"}],"nvd":[{"id":"CVE-2011-4076","description":"OpenStack Nova before 2012.1 allows someone with access to an EC2_ACCESS_KEY (equivalent to a username) to obtain the EC2_SECRET_KEY (equivalent to a password). Exposing the EC2_ACCESS_KEY via http or tools that allow man-in-the-middle over https could allow an attacker to easily obtain the EC2_SECRET_KEY. An attacker could also presumably brute force values for EC2_ACCESS_KEY.","status":"published","published":"2019-11-26T04:15:11.137Z","modified":"2026-06-16T23:34:22.923Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:12.945371Z"}],"osv":[{"id":"CVE-2011-4076","description":"OpenStack Nova before 2012.1 allows someone with access to an EC2_ACCESS_KEY (equivalent to a username) to obtain the EC2_SECRET_KEY (equivalent to a password). Exposing the EC2_ACCESS_KEY via http or tools that allow man-in-the-middle over https could allow an attacker to easily obtain the EC2_SECRET_KEY. An attacker could also presumably brute force values for EC2_ACCESS_KEY.","status":"published","published":"2019-11-26T04:15:11Z","modified":"2026-07-06T08:11:25.842143637Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:43:58.279353Z"},{"id":"DEBIAN-CVE-2011-4076","description":"OpenStack Nova before 2012.1 allows someone with access to an EC2_ACCESS_KEY (equivalent to a username) to obtain the EC2_SECRET_KEY (equivalent to a password). Exposing the EC2_ACCESS_KEY via http or tools that allow man-in-the-middle over https could allow an attacker to easily obtain the EC2_SECRET_KEY. An attacker could also presumably brute force values for EC2_ACCESS_KEY.","status":"published","published":"2019-11-26T04:15:11.137Z","modified":"2026-10-23T18:03:44.86587421Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:24.612044Z"},{"id":"GHSA-vcmv-6rxx-fh7r","title":"OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor","description":"OpenStack Nova before 2012.1 allows someone with access to an EC2_ACCESS_KEY (equivalent to a username) to obtain the EC2_SECRET_KEY (equivalent to a password). Exposing the EC2_ACCESS_KEY via http or tools that allow man-in-the-middle over https could allow an attacker to easily obtain the EC2_SECRET_KEY. An attacker could also presumably brute force values for EC2_ACCESS_KEY.","status":"published","published":"2022-04-22T00:24:18Z","modified":"2026-07-06T08:11:25.842143637Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:46:56.981655Z"},{"id":"PYSEC-2026-691","title":"OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor","description":"OpenStack Nova before 2012.1 allows someone with access to an EC2_ACCESS_KEY (equivalent to a username) to obtain the EC2_SECRET_KEY (equivalent to a password). Exposing the EC2_ACCESS_KEY via http or tools that allow man-in-the-middle over https could allow an attacker to easily obtain the EC2_SECRET_KEY. An attacker could also presumably brute force values for EC2_ACCESS_KEY.","status":"published","published":"2026-07-02T14:13:18.024973Z","modified":"2026-07-06T08:00:47.583130729Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:58.117212Z"}]}}