Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-5286
HistoryOct 26, 2015 - 5:59 p.m.

CVE-2015-5286

2015-10-2617:59:07
CWE-264
[email protected]
web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

6.2 Medium

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.8%

JSON

OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting images that are being uploaded using a token that expires during the process. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-9623.

Affected configurations

NVD
Node
openstackimage_registry_and_delivery_service_\(glance\)Range≤2014.2.3
OR
openstackimage_registry_and_delivery_service_\(glance\)Match2015.1.0
OR
openstackimage_registry_and_delivery_service_\(glance\)Match2015.1.1

Related

osv 1
prion 2
ubuntucve 2
github 2
cvelist 2
cve 2
debiancve 2
nvd 1
redhat 4
veracode 2
ibm 2
openvas 1
ubuntu 1
nessus 1
osv
osv
OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service
2022-05-17 03:44:52
prion
prion
Design/Logic Flaw
2015-10-26 17:59:00
Design/Logic Flaw
2015-01-23 15:59:00
ubuntucve
ubuntucve
CVE-2015-5286
2015-10-26 00:00:00
CVE-2014-9623
2015-01-23 00:00:00
github
github
OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service
2022-05-17 03:44:52
OpenStack Glance Bypass the storage quota and Denial of service
2022-05-17 03:28:28
cvelist
cvelist
CVE-2015-5286
2015-10-26 17:00:00
CVE-2014-9623
2015-01-23 15:00:00
cve
cve
CVE-2015-5286
2015-10-26 17:59:07
CVE-2014-9623
2015-01-23 15:59:06
debiancve
debiancve
CVE-2015-5286
2015-10-26 17:59:07
CVE-2014-9623
2015-01-23 15:59:06
nvd
nvd
CVE-2014-9623
2015-01-23 15:59:06
redhat
redhat
(RHSA-2015:0838) Low: openstack-glance security and bug fix update
2015-04-16 13:12:57
(RHSA-2015:0837) Low: openstack-glance security and bug fix update
2015-04-16 00:00:00
(RHSA-2015:0644) Low: openstack-glance security and bug fix update
2015-03-05 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:05:21
Denial Of Service
2019-05-02 05:18:59
ibm
ibm
Security Bulletin: OpenStack vulnerabilities affect IBM Cloud Manager with Openstack (CVE-2015-7713, CVE-2015-5286)
2018-08-08 04:13:55
Security Bulletin: OpenStack vulnerabilities affect IBM SmartCloud Entry (CVE-2015-7713, CVE-2015-5286)
2020-07-19 00:49:12
openvas
openvas
Ubuntu: Security Advisory (USN-3446-1)
2017-10-12 00:00:00
ubuntu
ubuntu
OpenStack Glance vulnerabilities
2017-10-11 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : OpenStack Glance vulnerabilities (USN-3446-1)
2017-10-12 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

6.2 Medium

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.8%

JSON
Related for NVD:CVE-2015-5286
osv1prion2ubuntucve2github2cvelist2cve2debiancve2nvd1redhat4veracode2ibm2openvas1ubuntu1nessus1