Lucene search
HistoryAug 19, 2015 - 3:59 p.m.
CVE-2015-5163
openstack
image service
glance
cve-2015-5163
security vulnerability
nvd
6.1 Medium
AI Score
Confidence
Low
3.5 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
53.5%
The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo), when using the V2 API, allows remote authenticated users to read arbitrary files via a crafted backing file for a qcow2 image.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openstack:glance | openstack glance | eq | 2015.1.1 |
| openstack:glance | openstack glance | eq | 2015.1.0 |
Related
prion
prion
Code injection
2015-08-19 15:59:00
redhat
redhat
(RHSA-2015:1639) Important: openstack-glance security update
2015-08-18 01:19:46
osv
osv
veracode
veracode
Arbitrary File Read
2019-01-15 09:07:12
debiancve
debiancve
CVE-2015-5163
2015-08-19 15:59:00
ubuntucve
ubuntucve
CVE-2015-5163
2015-08-19 00:00:00
github
github
6.1 Medium
AI Score
Confidence
Low
3.5 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
53.5%
Related for CVE-2015-5163