Information Disclosure

2019-01-1509:27:09

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

59.7%

JSON

openstack-cinder is vulnerable to information disclosure. As data is retained after deletion of a ScaleIO volume, newly created volumes in certain storage volume configurations contains data from the previous volume. This leads to confidential information leakage between tenants.

CPENameOperatorVersion
openstack-cindereq7.0.3__3.el7ost
openstack-cindereq11.1.1__1.el7
openstack-cindereq11.0.2__1.el7
openstack-cindereq7.0.3__7.el7ost
openstack-cindereq8.1.1__10.el7ost
openstack-cindereq7.0.3__15.el7ost
openstack-cindereq11.0.0__1.el7
openstack-cindereq8.1.1__1.el7ost
openstack-cindereq7.0.3__9.el7ost
openstack-cindereq10.0.6__9.el7ost

Name	Operator	Version
openstack-cinder	eq	7.0.3__3.el7ost
openstack-cinder	eq	11.1.1__1.el7
openstack-cinder	eq	11.0.2__1.el7
openstack-cinder	eq	7.0.3__7.el7ost
openstack-cinder	eq	8.1.1__10.el7ost
openstack-cinder	eq	7.0.3__15.el7ost
openstack-cinder	eq	11.0.0__1.el7
openstack-cinder	eq	8.1.1__1.el7ost
openstack-cinder	eq	7.0.3__9.el7ost
openstack-cinder	eq	10.0.6__9.el7ost