CVE-2015-1195
- State
- Published
- Severity
- Not scored
- Published
- Jan 21, 2015
- Updated
- Aug 6, 2024
- Reserved
- Jan 18, 2015
Description
The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or delete arbitrary files via a full pathname in a filesystem: URL in the image location property. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-9493.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [openstack-announce] 20150120 [OSSA 2015-002.1] Glance v2 API unrestricted path traversal through filesystem:// scheme (CVE-2015-1195) ERRATA 1mailing-list
- https://bugs.launchpad.net/ossa/+bug/1408663
- [oss-security] 20150118 Re: [OSSA 2015-002] Glance v2 API unrestricted path traversal through filesystem:// schememailing-list
- 62169third-party-advisory
- [oss-security] 20150115 [OSSA 2015-002] Glance v2 API unrestricted path traversal through filesystem:// schememailing-list
- 71976vdb-entry
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.