CVE-2014-9493

The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4 allows remote authenticated users to read or delete arbitrary…

published January 7, 2015

CVSS
—
EPSS
3%
Percentile
86.3
In the wild
Unconfirmed
What it is

The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4 allows remote authenticated users to read or delete arbitrary files via a full pathname in a file: URL in the image location property.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02793 · 86.3th percentile
Published
2015-01-07T19:00Z
EPSS history
Timeline
  • 07 JAN 19:00Z
    The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4 allows remote authenticated users to read or delete arbitrary…
    cvelistv5