CVE-2015-0271
Fixed in a distro release EPSS 2%
The log-viewing function in the Red Hat redhat-access-plugin before 6.0.3 for OpenStack Dashboard (horizon) allows remote attackers to read arbitrary files via a crafted path.
Products: redhat openstack
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openstack 5 | redhat-access-plugin-openstack | 0:5.0.1-0.el7ost |
| Red Hat openstack 5 | redhat-access-plugin-openstack | 0:5.0.1-0.el6ost |
| Red Hat openstack 6 | redhat-access-plugin-openstack | 0:6.0.3-0.el7ost |