The "create an instance" API in OpenStack Compute (Nova) Folsom, Grizzly, and Havana does…
Priority LOW 20CWE-264Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Partial · None · None
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and GitHub. Impact type from CWE-264.
Summary
The "create an instance" API in OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to boot arbitrary flavors by guessing the flavor id. NOTE: this issue is due to an incomplete fix for CVE-2013-2256.
Why it matters now
EPSS 0.01509 74th percentileScored 2026-11-07
Fix Fixed nova (PyPI): 12.0.0a0
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | nova (PyPI) | before 12.0.0a0 | 12.0.0a0 | Patch available | GHSA-43cm-73px-5v4m |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- nova (PyPI) Vendor— Affected before 12.0.0a0 Fixed in 12.0.0a0 Patch available GHSA-43cm-73px-5v4m
Remediation
- Fix · GHSA-43cm-73px-5v4m nova (PyPI) Fixed in 12.0.0a0 Advisory →
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
Not affected: 2 products
- Red Hat OpenStack Platform 3
- Red Hat OpenStack Platform 4
Timeline
- 2026-10-02 Threatist record created from CVE-2013-4278
- 2026-10-03 Alias added: GHSA-43cm-73px-5v4m
References
Other 5
- https://bugs.launchpad.net/ossa/+bug/1212179
- https://github.com/openstack/nova/commit/4054cc4a22a1fea997dec76afb5646fd6c6ea6b9
- https://github.com/openstack/nova/commit/6825959560e06725d26625fd21f5c0b78b305492
- https://github.com/openstack/nova/commit/8b686195afe7e6dfb46c56c1ef2fe9c993d8e495
- https://github.com/openstack/nova
More OpenStack Compute vulnerabilities
- TI-2013-05849 The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver… CVSS 2.0HIGH 7.1
- TI-2014-00161 The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before… CVSS 2.0MEDIUM 6.0
- TI-2013-02015 Improper certificate validation in OpenStack Keystone CVSS 3.1MEDIUM 5.9
- TI-2013-03652 The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before… CVSS 2.0MEDIUM 4.3
- TI-2012-02292 The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1)… CVSS 2.0MEDIUM 4.3
- TI-2013-03658 Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and… CVSS 2.0MEDIUM 4.0
Sources
- CVE-2013-4278 · CVE Program
- CVE-2013-4278 · NVD
- FIRST EPSS
- GHSA-43cm-73px-5v4m · GitHub Advisory Database · CC BY 4.0
- CVE-2013-4278 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences