CVE-2015-1195

Fixed in a distro release EPSS 3%

The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or delete arbitrary files via a full pathname in a filesystem: URL in the image location property. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-9493.

Published 2015-01-21 · CVE record · OSV

Products: openstack image_registry_and_delivery_service_(glance)

Fixed upstream

Distro releases