[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f15Zrdw-dJ6hQiUD_HXJzOKWtDRsUtf4G9KzShn46nhU":3,"g5a-risk:CVE-2013-4278":109},{"success":4,"data":5,"meta":107},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":35,"epssPercentile":29,"epssTimeSeries":36,"severity":37,"affectedProducts":38,"affectedProductsCount":44,"references":45,"referencesCount":66,"weaknesses":67,"weaknessesCount":44,"isActivelyExploited":33,"cisaInfo":29,"otxData":29,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":105,"notableEvents":106},"CVE-2013-4278","What is CVE-2013-4278?","The \"create an instance\" API in OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to boot arbitrary flavors by guessing the flavor id.  NOTE: this issue is due to an incomplete fix for CVE-2013-2256.","The \"create an instance\" API in OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:is_public property, which...","2013-09-16T19:14:39.287","2026-06-16T23:56:56.39",3.5,"AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":34},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":30,"ExploitabilityScore":31,"ImpactScore":32,"ACInsufInfo":33,"ObtainAllPrivilege":33,"ObtainUserPrivilege":33,"ObtainOtherPrivilege":33,"UserInteractionRequired":33},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":28,"Exploitability":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"CollateralDamagePotential":29,"TargetDistribution":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"EnvironmentalScore":29},"2.0","NETWORK","MEDIUM","SINGLE","PARTIAL","NONE","",null,"LOW",6.8,2.9,false,[],0.01509,[35,35,35,35,35,35,35],"Low",[39],{"vendor":40,"product":41,"version":42,"criteria":43,"vulnerable":4},"openstack","compute","-","cpe:2.3:a:openstack:compute:-:*:*:*:*:*:*:*",1,[46,51,56,60,62,64],{"url":47,"source":48,"tags":49},"http:\u002F\u002Flists.openstack.org\u002Fpipermail\u002Fopenstack-announce\u002F2013-August\u002F000138.html","Openstack",[50],"Patch",{"url":52,"source":53,"tags":54},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2013-1199.html","Red Hat",[55],"Vendor Advisory",{"url":57,"source":58,"tags":59},"https:\u002F\u002Fbugs.launchpad.net\u002Fossa\u002F+bug\u002F1212179","Launchpad",[],{"url":47,"source":48,"tags":61},[50],{"url":52,"source":53,"tags":63},[55],{"url":57,"source":58,"tags":65},[],6,[68],{"id":69,"name":69,"description":70},"Unknown","CWE-264",[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2013-4278? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2013-4278, a low severity cyber security vulnerability from 2013. The \"create an instance\" API in OpenStack Compute (Nova) Fols...","CVE-2013-4278, CVE-2013-4278 vulnerability, CVE-2013-4278 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2013, CVSS score, exploit, patch, remediation, openstack security, compute vulnerability","\u002Fwhat-is\u002Fcve-2013-4278",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":10,"dateModified":11,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2013-4278","Cybersecurity","CVE-2013-4278, CVE-2013-4278 vulnerability, CVE-2013-4278 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":29,"Negate":29,"Nodes":99},[100],{"Operator":101,"Negate":33,"CPEMatch":102},"OR",[103],{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":104,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"B0A78821-7E37-4872-BAE4-0AB9AAEB1BFA",[],[],{"lastModified":11,"cacheTime":108,"version":22},1792268365056,{"score":110,"band":111,"action":112,"scoredAt":113},15,"Info","Track","2026-10-16T06:37:50.782046+00:00"]