The clear_volume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspecified vectors.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | cinder | < 2013.1.2-4 | cinder_2013.1.2-4_all.deb |
Debian | 11 | all | cinder | < 2013.1.2-4 | cinder_2013.1.2-4_all.deb |
Debian | 10 | all | cinder | < 2013.1.2-4 | cinder_2013.1.2-4_all.deb |
Debian | 999 | all | cinder | < 2013.1.2-4 | cinder_2013.1.2-4_all.deb |