Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-1851
HistoryJun 25, 2015 - 4:59 p.m.

CVE-2015-1851

2015-06-2516:59:00
CWE-200
[email protected]
web.nvd.nist.gov
45
openstack
cinder
cve-2015-1851
security vulnerability
remote file read
qcow2
nvd

6 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:N/A:N

0.002 Low

EPSS

Percentile

64.3%

JSON

OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command.

Affected configurations

NVD
Node
canonicalubuntu_linuxMatch15.04
Node
openstackicehouseRange≤2014.1.4
OR
openstackjunoMatch2014.2
OR
openstackjunoMatch2014.2.2
OR
openstackjunoMatch2014.2.3
OR
openstackkiloMatch2015.1.0

Related

debiancve 1
prion 1
redhat 1
openvas 4
nessus 3
ubuntu 1
fedora 1
ubuntucve 1
nvd 1
github 1
debian 2
securityvulns 2
cvelist 1
debiancve
debiancve
CVE-2015-1851
2015-06-25 16:59:00
prion
prion
Command injection
2015-06-25 16:59:00
redhat
redhat
(RHSA-2015:1206) Important: openstack-cinder security and bug fix update
2015-07-02 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3292-1)
2015-06-18 00:00:00
Fedora Update for openstack-cinder FEDORA-2015-10254
2015-07-18 00:00:00
Ubuntu: Security Advisory (USN-2703-1)
2015-09-18 00:00:00
nessus
nessus
Ubuntu 15.04 : cinder vulnerability (USN-2703-1)
2015-08-06 00:00:00
Fedora 21 : openstack-cinder-2014.1.4-2.fc21 (2015-10254)
2015-07-20 00:00:00
Debian DSA-3292-1 : cinder - security update
2015-06-22 00:00:00
ubuntu
ubuntu
Cinder vulnerability
2015-08-06 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: openstack-cinder-2014.1.4-2.fc21
2015-07-18 02:04:07
ubuntucve
ubuntucve
CVE-2015-1851
2015-06-25 00:00:00
nvd
nvd
CVE-2015-1851
2015-06-25 16:59:00
github
github
OpenStack Cinder file disclosure in image convert
2022-05-17 03:15:10
debian
debian
[SECURITY] [DSA 3292-1] cinder security update
2015-06-19 11:52:12
[SECURITY] [DSA 3292-1] cinder security update
2015-06-19 11:52:12
securityvulns
securityvulns
OpenStack cinder privilege escalation
2015-06-21 00:00:00
[SECURITY] [DSA 3292-1] cinder security update
2015-06-21 00:00:00
cvelist
cvelist
CVE-2015-1851
2015-06-25 16:00:00

6 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:N/A:N

0.002 Low

EPSS

Percentile

64.3%

JSON
Related for CVE-2015-1851
debiancve1prion1redhat1openvas4nessus3ubuntu1fedora1ubuntucve1nvd1github1debian2securityvulns2cvelist1