{"id":"CVE-2011-4076","aliases":["GHSA-vcmv-6rxx-fh7r","PYSEC-2026-691"],"title":"OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor","summary":"OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor","severity":"medium","cvss":5.9,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","vendor":"nova","product":"nova","ecosystem":"pip","affected":["nova < 12.0.0a0"],"patched":["nova 12.0.0a0"],"published":"2022-04-22","updated":"2026-07-06","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-vcmv-6rxx-fh7r","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4076"},{"url":"https://github.com/openstack/nova/commit/b1ab6da1495784ff581000018a6047fd19cf82c4"},{"url":"https://github.com/openstack/nova/commit/beee11edbfdd82cd81bc9c0fd75912c167892c2b"},{"url":"https://access.redhat.com/security/cve/cve-2011-4076"},{"url":"https://bugs.launchpad.net/nova/+bug/868360"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4076"},{"url":"https://security-tracker.debian.org/tracker/CVE-2011-4076"},{"url":"https://www.openwall.com/lists/oss-security/2011/10/25/4"}],"tags":["osv","pip"],"epss":0.01458,"epssPercentile":0.71968,"ingestedAt":"2026-07-08T18:25:53.301Z","slug":"CVE-2011-4076","body":"## Overview\n\nOpenStack Nova before 2012.1 allows someone with access to an EC2_ACCESS_KEY (equivalent to a username) to obtain the EC2_SECRET_KEY (equivalent to a password). Exposing the EC2_ACCESS_KEY via http or tools that allow man-in-the-middle over https could allow an attacker to easily obtain the EC2_SECRET_KEY. An attacker could also presumably brute force values for EC2_ACCESS_KEY.\n\n## Affected packages\n\n- `nova < 12.0.0a0`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `nova 12.0.0a0`","depth":"sunlit","depthScore":33,"depthScoreParts":{"impact":32.5,"likelihood":0.3,"exploitation":0,"ransomware":0},"changes":[]}